Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa
File:                     23fbc0e5-a66a-390c-ade4-63c07acf6025.roa (raw, json)
Hash identifier:          P+WNg0q9f8S9JYzYfuU31fUttR9LvhOG8QmYI+ZpOaU=
Subject key identifier:   E6:10:C4:58:C3:EA:2B:98:9A:11:24:D0:0B:B8:AD:B5:BB:57:63:5A
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584A6DBB4716E6371F6EEF844980
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     19651
IP address blocks:        2602:f9ec:fad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:47:16:e6:37:1f:6e:ef:84:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=c1be5bb1-fea5-4832-8b02-854750e6bb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:97:92:99:0b:4e:8a:8c:69:ff:68:68:84:
                    d3:e0:d0:6d:8c:94:0b:b5:4d:29:48:fa:b3:dd:e3:
                    75:d5:79:86:75:ce:df:26:33:d1:d9:00:f1:2f:35:
                    f9:ba:b5:63:18:50:02:1b:7a:91:67:05:03:f3:0c:
                    f8:2e:45:f3:86:45:ca:b4:69:e9:e0:1b:73:e0:6e:
                    00:d3:ba:6e:21:a1:d9:0f:bb:0b:3d:fc:a7:ac:cb:
                    e5:e9:c8:81:d1:91:82:e8:f6:25:02:2f:a4:47:ac:
                    10:f0:c8:5e:af:01:f0:7e:ee:e1:b4:04:7f:a6:59:
                    3a:af:f1:0e:31:1d:ac:d2:d2:b0:1f:f4:6c:3c:98:
                    d1:ba:78:8c:89:d1:3f:c1:c6:9a:92:03:08:70:80:
                    c3:f5:41:5d:56:55:df:27:c9:44:0d:79:1e:d8:92:
                    08:47:af:f2:b6:99:9c:24:eb:e9:9b:ba:20:ca:a2:
                    c1:2f:8d:c9:fa:a0:b8:b6:d8:bf:6d:3b:dc:8a:0e:
                    2e:55:aa:93:cb:a8:fa:36:96:e7:df:a0:9a:be:1b:
                    df:c8:55:3c:a4:fb:bd:32:4a:18:fc:4e:b6:cf:e4:
                    38:e3:65:3d:4a:b3:f9:80:9f:2a:4e:d3:5a:d8:ad:
                    ba:da:85:ad:d1:dd:3e:fa:46:70:54:ca:73:87:6f:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:10:C4:58:C3:EA:2B:98:9A:11:24:D0:0B:B8:AD:B5:BB:57:63:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:fad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:cb:b6:e0:77:1a:a5:e1:6c:6f:9f:8b:52:1b:63:4a:70:
         93:69:b9:54:93:aa:a7:b3:d6:4c:c9:4b:ab:93:db:2b:d4:cc:
         2c:b9:de:32:8c:53:97:9e:6a:ac:b2:51:a5:59:42:21:62:e3:
         bc:aa:71:0d:db:5e:9d:1d:c3:1e:0c:32:77:2f:56:f9:cf:89:
         b4:55:48:10:69:8d:ca:64:09:3c:29:c9:e4:94:93:0a:ac:41:
         2e:32:a4:98:2e:63:ab:74:d4:e2:b4:e7:60:28:b0:45:9f:74:
         d2:6d:0d:27:cc:e4:c2:4e:44:8a:57:7c:e3:63:80:f9:7c:32:
         57:c3:68:a7:3c:a5:d8:79:a6:13:fe:c6:ea:1e:f6:ca:22:56:
         6a:f7:d2:ca:95:57:eb:b5:64:5d:15:0a:10:5a:99:f2:51:b2:
         5a:5c:26:86:4e:21:6d:9b:d2:e9:f6:e3:7e:da:18:4a:10:a4:
         10:fe:4d:38:f9:5e:fd:b4:76:60:ee:3d:49:24:70:c4:20:25:
         e5:c4:6e:cd:4e:47:12:3f:ea:cf:6f:0f:03:ad:be:8a:6d:b4:
         0b:6c:7d:fe:f7:55:54:02:61:3b:ec:87:58:ed:87:c8:96:3e:
         06:9e:b4:68:67:c1:5c:e8:9f:19:5d:73:63:d6:e2:76:55:66:
         d1:02:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:50:22 2025 by rpki-client