Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
File:                     7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa (raw, json)
Hash identifier:          osrpB+InvpzNIuZEeMue/SognIrtTZ7MVhub2G/mee4=
Subject key identifier:   4E:CC:97:BC:8E:EE:BB:77:68:6F:4F:29:DE:E9:7F:A9:5B:E7:94:63
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584A0C055C18AA4A6122DD166700
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     210630
IP address blocks:        2602:fc24:10::/48 maxlen: 48
                          2602:fc24:11::/48 maxlen: 48
                          2602:fc24:12::/48 maxlen: 48
                          2602:fc24:13::/48 maxlen: 48
                          2602:fc24:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5c:18:aa:4a:61:22:dd:16:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a5cb4fcb-b9dd-4bab-b60e-7711ae88106d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:7a:9e:38:6e:e6:95:ba:aa:84:70:94:a6:
                    b3:b6:99:d2:68:98:b2:26:5b:48:cb:ad:bc:52:ab:
                    a1:3d:f3:bd:b5:af:81:bf:90:bb:9a:74:2d:fc:45:
                    33:98:35:2b:55:68:29:b0:9b:d2:5d:85:24:e1:f1:
                    ae:1a:c4:6c:cc:62:74:ec:ac:1e:4d:e0:88:aa:22:
                    5e:61:9e:84:f9:8b:fc:e1:9d:4a:9a:5e:bb:e9:e8:
                    33:8b:e1:22:1b:7e:3f:cb:30:ee:23:e2:81:71:a4:
                    b8:b9:da:35:91:b1:aa:c5:19:f1:7a:fe:7e:fb:f1:
                    c0:98:c1:5a:11:b5:47:38:15:3c:f2:3c:ed:97:1c:
                    88:5f:6f:09:bc:d4:f8:fe:09:58:7a:38:27:b6:96:
                    aa:5e:9d:95:d0:0d:b9:82:f3:b3:db:f6:7f:c7:0f:
                    0f:27:72:3a:a9:92:dd:a4:96:54:dd:08:d8:d5:73:
                    8b:9f:b9:f9:f0:41:c4:9e:c9:a9:0a:0d:44:b9:45:
                    ca:dc:88:0d:21:a0:94:5f:f4:90:85:ab:ae:16:fd:
                    3b:5b:d2:7f:f4:f5:8a:f1:df:d7:1d:84:b3:06:2f:
                    a5:4b:02:6c:7d:8c:de:8c:ef:64:6c:47:72:6a:07:
                    24:ab:5d:b3:21:a9:3d:08:2b:c7:82:e1:34:bd:2f:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CC:97:BC:8E:EE:BB:77:68:6F:4F:29:DE:E9:7F:A9:5B:E7:94:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:10::/46
                  2602:fc24:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:02:15:e3:cb:57:38:9a:f2:9e:be:25:8b:98:93:9d:98:6a:
         27:68:53:f3:5e:da:76:a3:8d:8c:63:50:d3:66:36:b4:77:76:
         4b:63:95:77:f9:26:4f:b9:ac:13:7e:07:00:8b:90:14:e4:56:
         18:fb:f8:77:9c:0a:b5:82:dd:40:a0:e9:0d:d2:ea:a7:04:93:
         52:b5:a9:58:7e:df:96:ee:06:25:bd:88:3c:38:95:b5:37:e6:
         99:b6:3e:c7:90:c5:dd:1f:4b:57:76:10:7e:fe:4b:26:e3:16:
         fb:73:01:1a:0d:16:60:8a:b4:5a:a5:35:ee:88:2b:91:cf:f3:
         62:9e:ec:61:e1:60:cf:28:ea:7d:8f:97:05:65:7a:6f:56:fd:
         15:d9:55:2a:9a:18:f5:35:de:06:95:cf:1f:8c:7f:8d:96:34:
         ae:cb:73:c6:1c:77:75:4a:31:84:02:85:35:01:8c:b4:df:88:
         4a:62:fa:e3:9c:ba:89:eb:85:5a:b0:b2:fc:11:48:3d:32:bf:
         de:d1:82:3e:61:97:84:5e:a6:18:77:26:b0:33:09:c4:58:d8:
         3b:87:32:57:11:7c:d2:93:1f:30:0f:4c:7a:82:67:2e:3b:0d:
         21:df:ba:f5:65:5b:67:98:17:3a:92:6e:32:58:ba:14:e6:34:
         fb:ea:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:02 2025 by rpki-client