Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
File:                     0e66e1a0-d526-33c0-8259-90113fc406d1.roa (raw, json)
Hash identifier:          b+5QUenVa6GdbNx0viijOS6opVWoyiR9p5szGZl3PxE=
Subject key identifier:   F2:1F:BE:7B:62:DA:D7:D3:45:DB:AE:FA:1F:8F:05:BE:89:48:6F:22
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F43285849F2E54A57C27188F2833F7DE0
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     138997
IP address blocks:        2602:fada::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4a:57:c2:71:88:f2:83:3f:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=342351b4-987e-4842-a0f1-b5ddcaccb16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:40:67:13:46:2d:fa:4c:c9:97:0c:0b:a4:
                    8f:b1:1c:7e:27:48:1b:3a:82:22:bc:35:7e:3f:58:
                    1c:e7:4b:bc:cf:d9:61:7f:d8:0e:de:ea:ff:81:f7:
                    53:b6:29:3d:cd:c7:1d:58:9c:34:0f:09:de:dc:d5:
                    9c:b2:9a:d6:ec:1b:21:8a:b2:7e:ec:94:38:da:80:
                    52:5c:b0:7f:e9:e6:9e:3a:47:16:64:59:c7:b1:5b:
                    13:e3:46:90:f2:67:cc:28:e5:7e:4d:93:42:bd:e1:
                    66:33:2e:80:84:3c:e2:cd:81:6e:96:ff:bc:8d:d1:
                    e0:0e:0e:b4:54:74:0a:b2:b9:e2:32:55:30:3b:b5:
                    bf:3a:f6:db:7e:c3:f1:01:36:5a:64:3d:33:3f:16:
                    be:98:05:c3:8f:9a:70:53:78:79:ff:72:dc:1f:4a:
                    f0:b5:3e:dd:39:c9:f2:4a:33:3b:35:01:22:db:54:
                    77:c7:e3:6d:5b:f5:2f:f7:dc:86:5a:c3:17:df:62:
                    2f:b0:df:e3:48:e1:71:9d:27:a8:86:8f:9a:9d:04:
                    e5:8d:3d:d1:78:ac:73:3e:ca:34:d6:d9:2d:cb:0e:
                    a3:59:26:79:c5:07:e2:52:d6:0b:63:38:69:68:98:
                    27:4f:33:65:eb:cf:30:42:ac:56:42:ac:0c:36:b1:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:BE:7B:62:DA:D7:D3:45:DB:AE:FA:1F:8F:05:BE:89:48:6F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fada::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:50:3b:5e:4c:e6:c6:e4:4c:05:df:e5:ea:e8:7c:16:9b:82:
         77:4e:46:c6:35:e4:9b:f2:85:69:28:de:5c:1c:af:e3:7c:aa:
         b7:fc:b1:37:1e:9f:58:dd:bb:5a:da:7c:a5:cc:cb:06:d8:53:
         65:68:67:5a:92:f0:1f:94:84:00:dd:b0:c4:0b:3e:19:ce:a8:
         85:72:d4:e6:ab:31:ec:ca:aa:8c:3a:86:78:21:7d:d2:bf:36:
         8f:3b:8c:a7:3e:02:54:39:4a:e4:bd:f5:b3:ad:47:70:d9:f5:
         40:08:ba:a5:7c:b6:0c:0e:fe:71:8e:3f:b9:0a:32:89:21:30:
         00:8f:a4:97:d3:63:7c:79:02:67:a1:45:26:a4:5c:da:ff:75:
         4d:4d:a9:32:2a:5a:1e:a1:e3:4a:f6:04:25:ef:70:bb:11:1f:
         d6:3f:3b:63:27:69:f8:3b:5d:0f:54:4f:54:7e:ad:da:ad:f2:
         d2:bd:ea:a0:10:9f:c2:7c:1d:3f:55:ca:a6:a1:01:8c:a2:bd:
         9e:3d:39:32:e2:3a:e3:6f:86:8c:4f:3d:64:8c:7e:0a:28:b1:
         c0:1e:12:45:81:2b:8b:87:7a:d5:6a:3c:a9:32:9d:5e:44:e9:
         94:3c:bb:52:f6:a1:86:d6:aa:07:06:34:1c:ad:18:f4:b2:be:
         13:be:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:13:41 2025 by rpki-client