Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa
File:                     3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa (raw, json)
Hash identifier:          iIYqykkuZLkNzOzwXd7fCD9cO+TA/0G8YyJAm8BTSok=
Subject key identifier:   17:59:AA:D2:FD:10:2D:D7:5B:28:55:64:DE:28:20:3A:C6:CF:A2:D9
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F4328584A6AF089F0099DE51B7CFF0200
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     15082
IP address blocks:        2602:f78b:a31::/48 maxlen: 48
                          2602:f78b:a32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:89:f0:09:9d:e5:1b:7c:ff:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=f29ff10f-06e5-472a-ad68-bfae82c7d202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:6c:71:1c:ef:38:fa:99:0b:2d:63:8e:eb:
                    f0:52:a2:27:49:94:bc:f0:54:33:63:17:81:a2:46:
                    84:b0:74:79:8e:ea:ab:e2:21:26:46:28:fd:11:0b:
                    10:23:62:0d:9e:5a:9c:b2:ee:c5:01:7c:28:c7:a1:
                    63:a6:fe:7d:60:c4:ac:97:c3:ab:13:06:46:ae:ee:
                    53:4a:b6:2e:91:61:0a:5b:29:b3:5c:7e:b5:d5:a4:
                    96:22:78:a9:38:5c:aa:10:87:80:a6:9d:0e:80:17:
                    94:d0:03:68:97:eb:91:28:e3:2d:16:95:3e:85:f0:
                    22:9c:32:4f:a2:78:65:e9:14:08:6c:32:66:54:b7:
                    65:88:b6:d2:0c:d1:f2:00:5b:6a:ea:32:6d:78:70:
                    aa:4e:b1:b3:89:1e:23:e1:38:b9:98:d6:d7:ee:4d:
                    f3:2e:5a:20:98:6b:4a:96:83:e4:06:67:99:94:09:
                    c3:60:1f:c7:25:7a:d8:cc:71:f7:ed:d5:86:33:ff:
                    c6:94:b9:68:61:0d:c0:69:9b:13:47:02:08:2f:58:
                    82:6b:96:7f:1b:5f:a8:ec:fc:bf:15:11:db:72:b8:
                    28:38:92:67:85:d7:60:f9:00:2c:cf:6a:4c:6d:c5:
                    fd:51:a0:e5:3b:be:b6:0e:96:63:91:b7:ac:c8:8b:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:AA:D2:FD:10:2D:D7:5B:28:55:64:DE:28:20:3A:C6:CF:A2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78b:a31::-2602:f78b:a32:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:9a:2a:ff:72:20:b4:50:3c:35:38:02:1a:04:70:fa:2a:
         8e:e4:9c:8f:5a:7f:b8:5f:d2:1e:2e:da:a6:1c:ca:66:d1:a8:
         08:40:d3:29:b1:5c:46:49:b9:f0:cd:c1:47:2e:73:59:c9:a6:
         0e:0c:2a:c2:d8:6f:c2:fb:d6:e6:a6:54:65:b9:ed:dc:5d:c8:
         6c:76:3f:38:de:59:a5:35:ea:ea:35:38:16:55:e2:72:72:ce:
         04:dd:fc:1b:b2:00:f2:b3:86:0b:4e:05:b4:2b:e8:7a:17:fd:
         46:d2:ba:82:5b:23:dc:33:22:8d:81:b0:b4:d0:fc:fa:9c:83:
         e1:f0:3b:38:b6:4b:66:9f:30:23:14:e6:6d:4c:bf:30:80:01:
         27:a4:4a:f5:c3:ea:16:ef:ee:b2:96:48:d6:0b:f3:c9:41:93:
         55:d2:67:31:3c:b6:65:42:f3:98:00:a2:0b:ba:01:3d:fc:73:
         e4:b4:e1:64:92:16:83:56:dc:4c:24:08:9f:da:de:60:84:a9:
         ba:d0:de:e1:a3:98:e9:74:e6:8d:c7:21:e6:b5:da:3f:0c:47:
         b4:57:ba:3e:1c:21:cf:f5:63:11:8e:11:34:33:62:07:02:81:
         3c:4e:41:8f:82:0d:0a:ef:72:65:34:65:7a:89:9f:46:63:b6:
         11:d4:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 12:20:39 2025 by rpki-client