Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/cb8633f8-8757-3dc5-b18c-ce4d7b2a3d05.roa
File:                     cb8633f8-8757-3dc5-b18c-ce4d7b2a3d05.roa (raw, json)
Hash identifier:          dRX+S5sktKoTTtgatHNSv4suQGD3GVurXylx/qXNtqc=
Subject key identifier:   88:0D:A0:E0:4D:18:A4:AB:D6:54:E7:AE:61:A9:ED:8A:7F:DA:24:3A
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285849FF75182833DFAF3D6858D380
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/cb8633f8-8757-3dc5-b18c-ce4d7b2a3d05.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2602:fb00:a0::/48 maxlen: 48
                          2602:fb00:a1::/48 maxlen: 48
                          2602:fb00:a2::/48 maxlen: 48
                          2602:fb00:a3::/48 maxlen: 48
                          2602:fb00:a4::/48 maxlen: 48
                          2602:fb00:a5::/48 maxlen: 48
                          2602:fb00:a6::/48 maxlen: 48
                          2602:fb00:a7::/48 maxlen: 48
                          2602:fb00:a8::/48 maxlen: 48
                          2602:fb00:a9::/48 maxlen: 48
                          2602:fb00:aa::/48 maxlen: 48
                          2602:fb00:ab::/48 maxlen: 48
                          2602:fb00:ac::/48 maxlen: 48
                          2602:fb00:ad::/48 maxlen: 48
                          2602:fb00:ae::/48 maxlen: 48
                          2602:fb00:af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:18:28:33:df:af:3d:68:58:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=441b422b-00ba-409f-9f4e-43c19f9994ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:a3:94:a5:22:fe:2c:3b:cf:bc:5e:c0:55:
                    23:a0:e2:76:10:97:f0:c3:82:52:e7:bb:10:35:e1:
                    06:bc:53:74:59:04:40:e0:9b:d7:be:4c:5a:20:bf:
                    5a:15:51:db:a2:9f:04:d6:f3:08:a2:52:c1:af:53:
                    b0:ae:0f:35:7a:ca:7b:16:80:81:e4:9d:b4:29:b9:
                    e6:f0:08:fd:dd:f4:2c:e3:2b:2d:4c:8d:92:9d:13:
                    cd:ff:d9:7a:94:0e:4a:d2:5c:2a:38:77:32:eb:e1:
                    19:6a:ad:7a:47:ef:c9:39:e9:cc:58:fb:80:e1:9f:
                    b4:2e:d1:f8:b8:47:53:28:7d:c4:2c:ef:e2:eb:90:
                    01:b9:fc:82:25:db:b1:f0:fa:43:07:27:69:ab:dd:
                    ea:59:72:b4:87:8b:fc:cd:c3:b8:25:ff:0a:2d:0f:
                    10:b9:be:d9:11:fe:55:e5:4c:8c:08:0c:74:af:cc:
                    0a:e7:d6:88:6b:f5:e7:a2:2c:1e:57:54:b9:44:1f:
                    63:0b:4a:f1:da:d5:b6:70:24:73:87:0f:75:80:65:
                    a9:84:62:bc:7d:bc:e0:9c:e2:45:aa:1c:a1:cf:16:
                    d6:24:4f:ee:48:b9:7a:91:05:34:3f:62:02:6d:80:
                    6f:9c:ff:da:4f:5f:5b:46:8f:c1:c5:e2:2e:48:ba:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:A0:E0:4D:18:A4:AB:D6:54:E7:AE:61:A9:ED:8A:7F:DA:24:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/cb8633f8-8757-3dc5-b18c-ce4d7b2a3d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:70:b4:ac:df:23:12:55:06:3e:53:5b:a0:dc:1b:0f:70:b7:
         f6:ae:8e:64:a6:82:d2:c0:9e:45:e0:ce:38:f1:c9:1c:4e:1d:
         df:e7:0c:51:43:c9:76:79:4c:9c:a9:fa:a0:2f:7f:bc:b5:b8:
         1d:57:ec:db:62:5e:ea:b3:ab:a2:51:65:27:91:fe:0d:2c:34:
         49:a8:7b:61:da:fc:1f:c1:51:b1:8c:32:0a:7d:87:9a:ad:54:
         94:14:5c:c3:00:07:9e:cc:40:e8:d5:b3:f6:02:95:12:d7:98:
         37:f1:7b:71:a7:50:43:12:63:f4:a1:54:9d:64:97:7a:7d:c5:
         ab:1e:0f:2c:4c:69:eb:02:07:26:30:13:b9:8a:90:1a:d6:33:
         cf:e8:23:85:fe:4c:29:ef:3d:84:2d:8e:d7:15:50:68:6f:a4:
         8c:19:21:2e:c8:1a:da:09:03:cb:89:6c:b2:9e:c5:30:be:e9:
         d9:21:32:ec:49:96:d8:18:9a:ac:56:45:f2:26:3d:5f:9c:2c:
         82:34:21:04:71:8e:29:2b:e5:3d:90:ae:b3:a8:cc:1d:10:1b:
         ec:13:79:69:e2:2e:77:73:7c:49:b3:dc:66:f8:f6:92:1a:55:
         72:a4:96:e3:c0:7a:2d:ea:c9:b0:d8:02:46:ed:83:00:b1:46:
         5f:32:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:16 2025 by rpki-client