Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cf7f0045-eccb-3709-ae01-e40c1a37262e.roa
File:                     cf7f0045-eccb-3709-ae01-e40c1a37262e.roa (raw, json)
Hash identifier:          EqBl96VwWsB6uHkIP0+noQd8g+mvGVAydanDLx3ipwI=
Subject key identifier:   74:A4:B1:45:F1:21:3D:C6:56:18:DD:36:37:1A:19:65:0F:6D:63:60
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F432858491D6E9BC684720D5663D7D680
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cf7f0045-eccb-3709-ae01-e40c1a37262e.roa
Signing time:             Sat 08 Mar 2025 01:55:08 +0000
ROA not before:           Sat 08 Mar 2025 01:55:08 +0000
ROA not after:            Fri 06 Jun 2025 00:55:08 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:6e:9b:c6:84:72:0d:56:63:d7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Mar  8 01:55:08 2025 GMT
            Not After : Jun  6 00:55:08 2025 GMT
        Subject: CN=76b453eb-de5b-4d65-958b-f3d90b2b68ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:d1:02:c0:b0:7a:56:b6:1d:59:3c:b1:fb:
                    f8:ef:a3:03:10:b4:f0:50:10:af:e2:eb:53:fa:2e:
                    30:6a:ed:40:2f:65:d7:e3:82:4a:1d:2e:92:85:07:
                    4b:79:c5:b1:c9:35:06:49:d0:1e:46:85:22:29:31:
                    25:d7:c7:80:2b:c0:d2:78:eb:c0:25:8f:fc:88:e0:
                    0a:f4:64:47:ff:ab:f5:2c:2b:e4:12:97:1f:05:09:
                    08:e9:c3:f3:12:75:cb:88:7e:85:af:02:a5:46:41:
                    f9:c8:10:48:07:de:e6:b0:28:4a:66:09:3a:9c:33:
                    59:6d:d9:70:4e:3a:76:cb:91:9d:62:59:a5:e3:80:
                    f8:17:0e:3b:a7:5d:bc:0b:aa:7e:41:e2:43:af:0f:
                    8c:bd:58:2b:78:d4:c8:a1:10:b6:72:94:29:86:9a:
                    cb:96:11:85:ee:33:d0:ca:4a:3a:ab:fb:69:4b:7f:
                    e1:ed:f2:3d:10:05:24:98:4b:b6:9b:8d:97:52:e0:
                    19:2d:7c:f6:10:dc:8a:b8:b5:ae:cc:a8:54:49:3e:
                    b3:03:ee:fa:c6:6f:25:64:d1:30:4d:cc:16:0d:4b:
                    75:8c:e0:5d:76:cf:63:b1:84:41:b0:80:ba:6b:b9:
                    5c:a5:f6:bc:69:48:7a:5c:40:4c:23:79:32:9e:5d:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:B1:45:F1:21:3D:C6:56:18:DD:36:37:1A:19:65:0F:6D:63:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cf7f0045-eccb-3709-ae01-e40c1a37262e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:dd:65:14:7f:d8:4c:29:49:c9:ef:45:b6:9c:84:9f:db:f5:
         88:06:b6:06:38:df:76:83:07:ef:86:66:87:7a:2e:c6:e1:93:
         a4:0c:54:39:04:41:6e:bc:0e:81:4c:e7:f6:84:a1:9e:69:3d:
         b4:4d:dc:bd:0d:69:2a:62:d5:e9:6e:95:7a:89:d8:f0:db:92:
         33:29:42:1f:8d:a7:a1:fc:e6:e0:06:aa:cb:71:53:70:da:13:
         eb:a7:4f:98:38:cb:06:32:b7:91:4d:54:30:88:4b:c5:ba:00:
         cf:f9:0c:b4:f6:e5:50:6c:de:2f:5d:35:da:ae:34:8a:c9:97:
         43:cc:7d:66:38:dc:b5:12:28:bf:ca:61:2e:17:58:5b:ba:2b:
         28:4f:1c:86:d8:07:83:0b:d8:90:02:12:9c:79:87:19:c9:f1:
         e7:8f:f8:6a:43:16:58:ec:b2:fb:78:7a:28:31:c5:1f:f5:fe:
         ce:8f:be:ac:0b:14:93:dc:cf:a0:ea:b6:d7:e8:75:bc:a0:6b:
         cc:01:7c:8a:c5:11:db:73:af:d3:41:89:3d:76:44:d0:4c:9e:
         13:62:bf:3a:eb:8c:71:c4:c6:41:8c:36:f2:17:cb:a1:35:a4:
         ba:3d:ac:de:21:ef:77:9f:e3:2d:0b:c6:80:4b:68:68:d0:4f:
         a7:12:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:47 2025 by rpki-client