Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa
File:                     e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (raw, json)
Hash identifier:          z7QZwbaHtpu4RY6zoMDlMgyiC7jrSvgYeEzjBPQhRD0=
Subject key identifier:   26:22:9A:6B:20:29:54:32:81:FF:A7:DE:49:3D:6E:DC:9B:B1:19:77
Certificate issuer:       /CN=0b689f43-cae9-48ce-aef4-680ca5613c03
Certificate serial:       010D0C9F4328584A7D15F9DB906AABB096F4DC40
Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     29802
IP address blocks:        2602:ff16::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f9:db:90:6a:ab:b0:96:f4:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=39827e1a-ed07-4894-8e03-fd1b2fae2e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:e8:c4:13:88:d1:e7:89:ef:a7:f9:fa:08:
                    08:32:33:22:db:37:8a:67:e2:c8:b4:f0:94:82:13:
                    6e:de:28:76:11:29:c0:29:48:be:3e:71:f8:07:77:
                    bb:b4:cc:7d:4a:cf:94:5a:28:66:13:8e:0a:9e:05:
                    41:be:24:90:26:6d:c1:1e:7d:73:66:9c:96:b4:b8:
                    72:b8:49:ac:3e:40:84:b1:6d:f9:16:b6:57:fd:38:
                    43:96:0f:df:a1:56:8b:b4:90:68:31:26:b8:28:3b:
                    21:be:17:7b:47:6f:08:57:6d:c3:cf:78:03:5d:2d:
                    d3:e2:36:50:cb:8e:83:c3:b7:9d:0d:b1:13:02:d6:
                    9c:95:ff:44:1c:f0:90:e5:97:41:5d:ed:4e:99:9a:
                    9f:58:cd:48:cd:33:5e:fd:17:dc:cf:2c:99:17:c5:
                    5d:1c:88:0d:ff:5e:16:90:b7:95:05:52:fa:72:5d:
                    5f:85:9c:cf:5b:02:c3:5f:7e:91:cd:51:ac:c2:a8:
                    f9:ba:2e:5e:00:31:57:fb:d9:41:e7:d3:6c:99:6f:
                    60:0e:0d:a9:17:52:43:67:f4:bd:26:fb:64:66:ab:
                    85:03:61:7d:0e:d6:2b:9b:83:5d:c4:7d:e0:e8:72:
                    49:38:d3:b5:93:9c:19:a0:e2:05:39:60:fa:fe:61:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:22:9A:6B:20:29:54:32:81:FF:A7:DE:49:3D:6E:DC:9B:B1:19:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl

            X509v3 Authority Key Identifier:
                keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff16::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:23:c6:ca:d8:9f:09:d8:d7:44:4c:bd:1e:4f:f2:ec:18:
         23:9f:f8:db:50:f3:4b:a9:8e:e2:92:a7:23:3a:5a:d8:92:68:
         f2:57:d7:d7:11:ef:b4:88:1d:32:42:13:d2:29:6b:7a:33:c4:
         2d:5f:72:10:66:b3:72:82:77:18:73:47:17:35:5e:cf:83:7a:
         17:1a:b8:e2:2b:c8:1f:24:e7:df:a7:a9:0c:fb:98:99:6e:9d:
         95:72:79:0d:7f:48:96:a9:4d:db:57:b9:9f:dc:a9:0f:7b:c0:
         7d:2d:54:e7:b5:8f:87:46:34:3f:05:6e:38:64:49:1f:78:1a:
         35:42:a5:10:ef:c4:59:7e:82:d0:0c:86:5d:9c:8c:3d:1e:de:
         0b:8e:c2:c7:bc:93:99:31:94:98:f0:4f:f9:1f:f1:75:a0:e5:
         7a:22:dc:14:5e:44:13:a7:cf:d8:d1:a5:d8:e7:94:19:be:82:
         d4:70:2b:61:8c:42:61:0e:60:0e:60:da:e2:74:52:ee:31:1c:
         9d:3f:78:dc:fd:2c:28:55:73:2e:3a:8e:6b:4e:e0:04:59:fe:
         70:45:9e:31:30:8d:4d:09:89:b1:a7:8c:db:d3:78:b5:39:fb:
         05:b0:60:9d:27:fe:5a:52:5d:3d:9d:76:5c:a9:7a:05:6a:da:
         bc:1f:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 15 11:04:14 2025 by rpki-client