Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
File:                     5654a4a4-a12d-3b62-a5dd-539d4594a091.roa (raw, json)
Hash identifier:          c1Pe3Wt5/qg6LtYb+6aLEcM5XRueHfzFe0euUkmMiBE=
Subject key identifier:   59:6C:9F:E1:74:7D:C5:9B:C4:7D:BA:99:25:0F:81:7E:FA:ED:19:33
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584A23C00959D175619EFC14DC60
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14478
IP address blocks:        2602:fb65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:09:59:d1:75:61:9e:fc:14:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5da1c17a-df7d-4eb0-9bf3-d3710b3b0ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:4d:76:81:f1:d1:13:0a:d9:6d:78:86:0a:
                    68:d9:32:69:44:61:cd:ae:af:f6:94:14:93:df:e1:
                    76:48:66:db:9b:3d:5a:87:0d:dc:9f:f2:d5:4e:73:
                    c3:c6:4e:55:49:96:98:fc:2c:56:a3:02:ed:fe:e7:
                    5d:c7:0f:ac:6f:73:18:f2:a9:ff:b2:1d:03:ef:fb:
                    c9:e0:fc:df:37:94:64:ed:be:5d:08:ce:73:29:08:
                    d9:c2:1a:04:b1:ec:26:68:9b:e1:2f:e9:91:cb:c4:
                    43:c6:66:de:c9:2d:12:21:43:7b:9f:5c:0b:90:33:
                    bb:75:d2:df:aa:60:b4:9e:8f:86:cd:6b:56:9e:05:
                    5f:e1:4c:ed:1e:7d:bf:67:8c:d7:8d:96:f5:a7:91:
                    33:fb:c5:a5:3a:10:12:8d:2e:33:01:2a:3a:de:63:
                    1d:ef:a4:c6:90:95:b4:b2:4a:be:e3:1a:bc:70:e5:
                    6f:66:86:0d:3b:64:4f:89:f4:30:b4:f0:64:dc:73:
                    6c:e6:59:29:c8:bb:bf:43:d0:12:e6:f8:37:a8:ea:
                    48:05:0a:9c:79:8f:3d:e6:d5:98:12:b3:9f:43:0e:
                    e0:66:71:68:bb:59:c1:fc:58:b0:3d:b6:c1:b9:5c:
                    3f:51:8f:8d:bd:55:9c:eb:4a:22:22:15:39:d4:2a:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6C:9F:E1:74:7D:C5:9B:C4:7D:BA:99:25:0F:81:7E:FA:ED:19:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:21:b6:3a:1f:c1:cb:24:ce:85:ff:f5:de:69:ab:be:c6:
         e9:f7:14:fa:d2:63:4d:c9:93:49:22:64:3f:7f:59:e6:42:da:
         61:d5:87:1b:91:f3:c2:26:2f:63:2d:f6:1f:d4:54:0f:a2:18:
         a5:d4:4b:ed:0b:bc:3f:7d:ba:20:dd:26:28:71:e9:8b:4f:c2:
         f0:48:02:bd:f2:21:d3:f4:f5:00:60:1a:0a:c8:0a:d3:b5:74:
         17:29:e3:10:15:ec:01:04:cd:aa:09:45:bd:60:4a:a8:da:ba:
         da:dc:b7:80:8e:33:f9:a9:16:9c:2e:c1:ec:48:f4:33:6d:3f:
         81:c2:7b:01:89:33:f3:1b:aa:d0:a8:05:37:63:ea:42:61:a3:
         d1:d5:ac:c1:07:83:29:9d:ab:5f:9e:83:4e:44:c4:04:30:42:
         61:7c:b4:e3:0d:ba:57:5b:3c:c2:7c:22:00:b5:e2:1f:f5:c9:
         98:d8:f6:52:77:1f:63:0a:01:b7:db:af:5c:92:fb:53:44:7b:
         e4:91:41:bf:c3:97:76:2f:82:5c:56:fa:4c:bc:62:0d:d0:61:
         7d:53:9d:23:9c:49:4b:8a:89:0c:28:96:d4:0f:fe:c1:9c:94:
         fa:82:17:73:07:f4:84:13:5b:f5:4d:b7:81:e7:69:7d:ae:f8:
         13:9d:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:38 2025 by rpki-client