Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa
File:                     2bd6cacb-122a-3575-98c7-5fafe2268e65.roa (raw, json)
Hash identifier:          xrqyb6fynDKy2+MfyiK7isqEMjBppNNeu7Sq8PfOqGI=
Subject key identifier:   67:D1:F7:0E:C0:EB:C4:69:C5:DD:33:46:85:F7:C1:09:F2:85:4E:A1
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F432858491D6929B631C23E859F843700
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa
Signing time:             Sat 08 Mar 2025 01:44:09 +0000
ROA not before:           Sat 08 Mar 2025 01:44:09 +0000
ROA not after:            Fri 06 Jun 2025 00:44:09 +0000
asID:                     62787
IP address blocks:        2602:f6d0:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:69:29:b6:31:c2:3e:85:9f:84:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Mar  8 01:44:09 2025 GMT
            Not After : Jun  6 00:44:09 2025 GMT
        Subject: CN=53c0c667-28cc-4052-8f46-4c7c535d5940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:82:43:5c:bb:67:55:8a:db:d4:68:da:f7:
                    9f:2c:7e:1c:57:cb:47:68:9a:f8:35:e2:5c:58:eb:
                    38:af:e6:b3:86:fc:50:87:f9:ae:8a:d7:ba:ec:07:
                    ee:3f:27:71:cd:4e:49:05:94:2e:fe:f6:e6:c9:ad:
                    89:21:1a:6f:f8:f3:72:b9:15:7a:8f:82:8b:b8:d3:
                    e2:a0:84:48:fe:d7:9e:26:30:e7:ae:2d:29:39:cf:
                    35:4a:47:5e:bb:bd:22:36:95:0e:ee:7f:10:d3:1b:
                    1c:15:eb:a7:de:4b:bb:4d:80:8f:f4:1d:ad:e0:9c:
                    c7:2c:cc:0c:b1:5b:41:3b:ac:5e:a9:e7:15:0f:f7:
                    ee:db:97:07:e2:f0:29:76:45:ca:cc:b5:e6:4c:5d:
                    a3:c0:19:f5:77:c0:f8:32:3d:07:6b:5a:f2:64:82:
                    8e:9a:6a:62:14:3d:57:f1:17:cf:95:08:69:06:af:
                    9b:2f:02:69:a3:3e:d2:52:73:4a:67:2a:a5:49:08:
                    e2:d5:82:ee:ce:1a:79:f8:a5:2f:00:33:68:37:bc:
                    4a:37:9c:6e:73:c4:e5:40:73:92:18:a9:72:b5:b9:
                    53:61:50:20:d0:7d:e4:ae:00:67:c3:24:22:7a:d4:
                    0b:2f:51:e7:9b:2c:64:c7:69:71:b0:75:0d:11:33:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:F7:0E:C0:EB:C4:69:C5:DD:33:46:85:F7:C1:09:F2:85:4E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2bd6cacb-122a-3575-98c7-5fafe2268e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:92:a4:3f:ce:3d:a8:69:66:5a:d7:c3:ca:98:70:c4:5a:
         bc:86:85:f8:6c:5b:19:47:52:ef:e5:9e:96:b8:0b:ec:54:d8:
         ff:86:4d:ef:f4:90:d5:9e:b9:c6:4a:db:68:3e:d3:75:f7:32:
         e8:76:5c:c9:2b:b3:03:27:8d:1d:19:eb:e2:d6:5d:7b:a2:1e:
         04:99:96:4e:1e:96:74:b7:e6:3c:2d:b9:21:36:42:00:13:8d:
         77:8f:c0:e6:63:81:17:59:6d:96:d5:a1:8a:0c:b3:81:43:ae:
         ec:42:3f:fb:b7:3f:9e:8c:35:1d:43:ca:be:76:99:59:7b:8a:
         27:a1:19:54:5b:3d:12:5c:45:85:1f:f2:dc:a4:de:2a:a4:12:
         49:bb:bb:08:a2:5a:ff:f8:54:ee:62:94:1f:cd:1f:20:4e:ea:
         5e:01:4c:05:e2:51:18:c6:4d:48:ff:2b:47:c8:8a:44:13:55:
         ea:2d:e4:c9:bf:c7:a8:32:a8:49:3e:c1:95:1f:75:c6:29:5b:
         11:99:d2:6b:ea:ed:13:ba:cd:ff:2c:92:02:51:37:0d:f8:9d:
         79:7c:f4:70:8d:15:ec:73:b8:46:de:55:eb:da:9d:6f:3f:45:
         20:82:f3:05:7e:80:9b:3f:6a:b8:9f:93:88:52:4e:63:fe:40:
         0c:e4:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:11 2025 by rpki-client