Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa
File:                     3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa (raw, json)
Hash identifier:          /0ID4aLdkJDvcMmGaxX+Eq1sU6xVGY9TDlAvDc9dOH8=
Subject key identifier:   7C:E7:C5:67:8F:4A:37:7F:20:4B:09:FF:3A:8D:8C:88:BB:DC:81:2A
Certificate issuer:       /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
Certificate serial:       010D0C9F43285849FCAA66F1AB13FE4D7E156D00
Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     33083
IP address blocks:        2602:ff65:b22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:66:f1:ab:13:fe:4d:7e:15:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=98b883d9-000d-46fa-b747-40f883bd415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:80:08:f0:3c:00:ed:e5:70:55:ae:01:5f:
                    b8:2a:63:1a:e9:28:b1:49:57:47:43:ea:0f:70:fb:
                    30:18:b4:9f:be:8f:c8:5e:95:7f:a2:6b:0f:94:4e:
                    51:5a:3b:42:68:b5:f9:12:0c:14:91:38:a5:77:4b:
                    45:5e:91:9d:79:0e:17:db:f2:71:32:53:4e:19:78:
                    91:9c:64:12:ea:ba:e2:33:0a:50:8d:38:99:bc:a4:
                    d2:12:dd:c1:e6:85:93:c0:03:04:f7:e4:39:81:f3:
                    76:78:68:bd:fa:23:fa:84:b5:13:96:43:e1:44:2f:
                    65:d6:95:8a:68:86:87:e6:cd:c4:62:91:b1:c8:ba:
                    60:69:a3:c6:4c:8c:d3:fd:da:e6:23:bf:d4:90:29:
                    2e:6e:16:be:7a:d3:8f:68:97:28:06:22:46:a7:78:
                    56:b2:dc:4c:91:3b:b3:89:9b:7a:97:e2:2a:26:02:
                    d6:3b:e8:9f:b1:29:76:e0:f5:aa:73:bd:e8:84:46:
                    2e:de:22:33:61:76:09:17:e2:8c:14:e7:22:00:da:
                    2c:95:74:b4:b0:88:dd:54:78:7b:3a:74:44:c0:58:
                    12:a6:79:01:ec:8c:76:ec:42:d5:4d:8c:50:70:36:
                    aa:f9:08:7c:1a:6f:0a:22:44:d8:56:25:ee:4b:84:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:C5:67:8F:4A:37:7F:20:4B:09:FF:3A:8D:8C:88:BB:DC:81:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff65:b22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:bf:d9:b8:02:a5:71:0b:2d:6d:59:22:c5:0a:20:a4:a4:
         2e:f3:7e:33:d9:02:5c:fc:55:12:91:d4:8a:75:9f:43:48:63:
         a7:a6:34:3f:ea:6b:19:9c:ce:30:60:07:f7:71:86:07:58:a6:
         af:8c:4b:55:53:4f:7b:51:b5:c2:4e:63:1d:db:43:c5:c2:fb:
         b4:0d:ce:1f:ce:62:96:cc:62:1e:41:2c:9c:55:eb:01:c0:6e:
         52:c9:a3:88:06:24:57:ab:00:26:f8:46:42:86:69:51:08:95:
         2b:e2:6a:68:cf:78:c3:df:f6:e0:b0:a8:e5:81:0f:65:95:46:
         d8:96:51:84:84:71:24:d0:3f:05:78:87:e4:cc:34:b1:bd:85:
         56:46:9f:9b:cc:95:60:e8:70:07:ff:97:69:4d:2a:99:71:4e:
         7c:66:df:62:14:48:79:7b:6b:19:53:db:52:b8:bd:c4:e2:4b:
         5e:71:2c:f3:45:79:19:73:99:49:1d:30:78:16:0b:b3:38:a1:
         89:8c:39:11:81:bf:20:c0:6f:ad:c0:27:40:57:93:f5:07:cc:
         a2:fe:03:d5:a8:9e:f2:60:2c:09:d6:0c:a8:3c:34:31:ec:35:
         fb:80:e9:a9:10:2f:1d:d7:cd:f2:d6:f9:b4:41:c3:35:ad:ee:
         b5:6c:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:26:41 2025 by rpki-client