Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          FOm4TBbEbAtPPjmdgaeJWZTHmXskwT1yVuCcFWEWKXg=
Subject key identifier:   28:51:C9:43:E0:E5:19:CF:C0:08:CB:29:47:05:64:5D:80:F5:F6:6D
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584A629093D63139CEA4F50360C0
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:93:d6:31:39:ce:a4:f5:03:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=531a1dd0-c7fe-46d6-862d-4eb821009581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:a8:49:b5:be:f4:f9:5f:07:ae:94:d8:43:
                    53:9d:c8:5b:a8:88:69:65:01:2c:7c:8e:94:de:c3:
                    bc:50:67:f7:04:98:30:40:5d:89:7b:67:71:6b:ea:
                    49:03:4b:ec:39:e2:d4:2c:4c:ea:55:2b:5c:ff:0d:
                    5a:ac:84:ec:94:11:b3:2d:de:b4:a5:67:36:ac:f9:
                    dc:97:4d:29:aa:54:9f:d2:02:a5:f1:f5:72:4a:cd:
                    ad:cb:73:54:53:b2:c0:2f:15:c9:e3:84:8b:f8:57:
                    56:d9:de:58:ff:10:c6:61:30:e5:78:b7:40:32:39:
                    03:9c:93:50:0b:51:b4:a2:63:a2:36:88:f8:15:36:
                    51:f4:27:9b:a5:8d:78:1e:a9:eb:de:a8:ae:ff:16:
                    3d:82:01:a2:9b:c9:59:e8:02:12:3f:df:1b:2c:cb:
                    fb:fc:e7:7b:05:6c:37:7d:21:66:ec:55:31:39:70:
                    70:91:9b:be:15:93:c1:0f:ff:36:a7:34:f2:3d:24:
                    12:fa:2b:b5:9c:8f:54:3b:37:f6:87:93:df:85:a7:
                    f2:3a:6c:52:86:da:ce:84:fa:2e:93:08:81:0e:44:
                    9f:13:17:65:e2:72:84:43:45:a4:bc:f6:c2:f2:c8:
                    a1:27:ae:84:c9:e8:1f:a6:90:76:95:9a:fc:c6:4c:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:C9:43:E0:E5:19:CF:C0:08:CB:29:47:05:64:5D:80:F5:F6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:9f:e7:06:d0:9e:36:7a:c2:07:0d:d4:6c:bf:49:b6:da:
         06:56:80:86:f9:81:3c:63:9a:3a:89:a0:04:c4:54:fa:4b:f4:
         55:6f:b4:73:1f:3e:04:2b:03:16:a4:17:fb:2a:85:d8:e1:2e:
         f9:cd:df:aa:f0:07:44:19:f0:6e:fa:01:f9:e0:ed:69:12:35:
         d8:6a:1b:0c:8a:a8:a8:6c:0a:02:3e:70:ed:7d:cd:86:b8:da:
         96:c9:0a:9d:4a:07:a9:53:af:bf:12:ab:f5:83:3e:75:0b:5c:
         26:7e:4d:26:c5:64:b4:bd:e2:cb:8d:c0:3d:4a:27:5c:d5:4e:
         3c:cc:83:00:86:7a:75:e0:e7:91:86:35:c2:da:97:5e:2b:06:
         2e:7f:6f:4b:11:6d:bb:0a:d1:27:17:7f:64:a0:e9:9e:05:c5:
         02:cf:1f:36:ca:3f:ad:cb:b2:7d:41:57:99:39:3f:09:30:6c:
         3c:56:05:70:50:81:47:f5:2a:15:33:bb:ef:e3:e0:50:e6:99:
         71:cf:f1:f0:42:d2:b1:58:e6:6c:b8:d0:f0:bf:0c:46:b0:a0:
         06:08:ed:23:9c:c5:01:a4:d0:d4:88:57:76:0b:0b:a5:44:e6:
         73:53:db:09:5e:23:1e:e1:6b:61:47:3a:57:8b:b8:4b:0f:fc:
         89:79:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:22:14 2025 by rpki-client