Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa
File:                     308f91f3-f160-3e8b-bc6e-f6437accfeac.roa (raw, json)
Hash identifier:          rCQ2Q91fuPWrXxe3B4IxKvdzchgXY/jSUTBKrfN8d8Q=
Subject key identifier:   63:08:60:61:12:13:42:91:2C:01:01:64:2C:97:55:FB:32:26:F3:F0
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F4328584A90A0B18A8221B0778B8D0620
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     6145
IP address blocks:        2602:fc8a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b1:8a:82:21:b0:77:8b:8d:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6e4d9a0f-d8e0-4ba3-81b3-a021cae5f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:d5:da:26:92:69:41:ca:c3:f6:ca:57:8e:
                    9a:00:9e:c2:3f:bc:39:71:10:1b:eb:6b:50:68:d6:
                    27:7a:ea:2f:a7:e0:56:4c:4f:d8:dc:73:be:ca:58:
                    56:bd:7d:6e:f0:a8:79:9e:f4:19:a9:77:10:25:1d:
                    95:0f:7e:3b:f6:c7:b7:04:cc:80:43:02:58:1a:cb:
                    00:63:2f:23:ea:07:8e:ca:6d:49:54:e3:d6:b4:3e:
                    92:a4:4f:66:1c:6d:36:bc:c3:16:ba:4c:a9:6b:ed:
                    bd:a6:b4:85:cf:72:91:8c:7c:56:69:8b:1e:e0:90:
                    36:92:ea:d4:54:9e:dd:45:fd:f7:49:f8:86:26:ef:
                    53:29:b9:f0:a4:7d:d1:68:23:6f:6a:49:2a:5d:84:
                    e0:f7:43:3b:13:68:28:f0:8e:97:eb:0b:a5:59:ab:
                    ea:4d:df:69:bc:86:36:77:7d:76:61:62:2e:02:51:
                    27:61:3d:66:2d:08:00:33:64:40:52:62:f1:33:b0:
                    1f:31:e2:3c:b5:13:67:ea:b8:f5:44:08:80:2a:41:
                    5d:11:16:2a:65:3f:92:c5:f5:0f:68:a5:b6:62:bd:
                    e2:fa:2a:e3:ce:b9:33:b1:3a:40:30:bc:42:19:a6:
                    6b:3a:d9:3a:ff:40:d1:2a:bc:f6:62:a1:39:5f:a8:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:60:61:12:13:42:91:2C:01:01:64:2C:97:55:FB:32:26:F3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:88:83:7e:8c:77:29:97:7f:3d:1c:7b:5c:f0:9d:c5:9d:
         28:19:36:f9:13:27:51:42:14:91:39:10:d8:f4:17:eb:d5:9c:
         d1:31:b3:fa:40:eb:04:c8:52:7b:13:8e:d9:d2:44:b8:9e:08:
         b5:72:59:5c:2f:4d:59:9d:fa:32:22:7e:d5:e7:64:df:cd:2c:
         e7:b8:4b:2e:57:cb:1c:52:68:f2:cc:d4:88:97:71:b2:36:d4:
         6c:48:a0:d8:4f:c5:a7:73:6f:9e:64:1d:cf:b2:02:91:af:20:
         f2:ad:ce:53:47:1b:54:53:71:ff:d8:d9:77:b0:48:da:40:0c:
         2b:82:3e:3d:d4:15:f4:96:75:7f:5c:28:3c:6b:6c:50:d1:6f:
         4a:29:d0:ca:a0:8e:5a:39:2b:41:ae:38:15:73:21:6c:fe:24:
         9a:64:92:71:49:53:40:af:77:ec:e2:c2:a2:65:49:f6:2a:76:
         9a:d2:08:8d:52:44:a1:6f:34:7f:9c:20:81:93:6f:84:72:72:
         c1:54:83:e6:a2:b9:96:cc:d5:c2:5a:ea:48:f7:b7:5b:b9:c3:
         ea:f4:4a:90:d7:74:27:9c:93:26:b2:71:9b:e5:72:33:5c:cf:
         40:8b:5b:8c:43:f4:51:59:f3:e2:ca:4e:ec:3e:2e:38:50:01:
         aa:a1:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:25 2025 by rpki-client