Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8384bdc1-19c1-350c-8675-de050bb53236.roa
File:                     8384bdc1-19c1-350c-8675-de050bb53236.roa (raw, json)
Hash identifier:          6wU4SI6bYRhDtnFnLPqkFQJBfQ1/PkdKEcO7LLknNWk=
Subject key identifier:   53:CD:01:25:E5:92:64:C9:59:5A:A5:0C:EF:B4:2E:CC:FD:C7:62:63
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285849BDDA27E1DF1AD7DAC7356FC0
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8384bdc1-19c1-350c-8675-de050bb53236.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     210630
IP address blocks:        2602:fc24::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:27:e1:df:1a:d7:da:c7:35:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=fbbc7069-6196-489a-8cee-11cf2fbd999f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:83:d2:1f:b1:84:34:3a:3f:26:7d:5a:10:
                    12:1d:2d:31:4e:2a:86:80:b8:67:88:19:76:66:d0:
                    b7:db:54:0e:cd:6a:44:3e:a2:a1:9e:a8:ca:c4:ad:
                    8c:8c:0c:02:57:64:45:1c:91:0f:3e:0e:e0:a1:6b:
                    6d:cc:55:8a:db:07:99:3d:bc:98:ae:51:cc:72:a3:
                    7c:91:3c:2c:d9:a3:5c:a8:74:29:04:1f:96:db:3b:
                    9d:59:87:04:06:ba:d5:87:45:fb:d8:2f:2c:ec:6e:
                    7f:0d:38:ac:fc:4f:2c:53:88:7d:cc:6d:a5:ce:65:
                    57:66:c0:de:42:9a:5e:af:ba:60:33:d1:7f:8a:25:
                    c6:69:ea:bd:83:77:30:78:76:46:3f:22:85:2c:9a:
                    20:31:54:e4:fb:87:e7:e0:79:18:66:c8:69:e3:6c:
                    10:e8:fb:93:88:2a:11:59:a0:eb:7e:27:ac:40:2d:
                    63:be:73:4e:88:17:a2:da:f6:3b:f5:d1:c2:5b:cc:
                    3a:86:e1:af:51:13:6d:56:68:2d:f4:75:f1:89:6b:
                    7b:62:4b:3a:15:9e:39:55:31:6a:9d:1a:d1:7d:a2:
                    e2:f7:ef:39:42:ae:04:37:f1:76:80:d6:cd:df:29:
                    fd:12:eb:e5:bc:fc:fb:1f:77:72:37:23:86:fc:46:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:01:25:E5:92:64:C9:59:5A:A5:0C:EF:B4:2E:CC:FD:C7:62:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/8384bdc1-19c1-350c-8675-de050bb53236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:ce:ee:94:6a:c5:34:48:2f:92:6f:de:c4:a1:7f:f3:30:
         20:38:ff:99:e0:1b:ad:16:5f:0e:8f:74:e2:e2:b8:bd:9a:75:
         eb:ef:35:6b:db:bd:c7:e8:df:92:5d:c6:80:b4:ec:2b:8a:81:
         74:9d:72:b0:61:a5:63:93:ea:5c:1f:ab:81:3b:9e:1d:1c:ff:
         1f:4d:1a:d3:b9:f5:c4:e0:8d:f9:8f:2b:e1:0e:d1:d4:7b:af:
         34:b3:c8:44:83:bc:5d:ec:6b:a4:15:96:6e:57:30:78:b2:dd:
         3b:e2:9d:f4:73:68:87:bf:25:1c:ff:90:c1:3e:4c:81:55:de:
         c3:35:dc:a4:39:ac:b0:9c:3e:ba:99:8c:b3:92:31:2b:67:4b:
         3c:11:b2:d2:38:00:95:94:77:f4:de:3e:18:1b:d1:89:bf:08:
         06:17:46:da:51:1a:56:78:df:f1:e2:e2:de:48:7c:88:48:38:
         b9:b6:5e:b6:a8:1e:0c:7a:81:16:79:72:3e:3d:65:50:8a:32:
         10:02:a5:ad:ab:a5:05:83:26:b3:61:89:4a:69:cd:42:6e:9a:
         6c:6f:94:28:30:cb:c7:64:4e:85:85:db:4f:63:3e:d7:25:2d:
         5a:04:2a:55:5e:18:95:eb:b6:7d:38:19:b6:a2:7d:79:cc:de:
         fe:8d:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:24 2025 by rpki-client