Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3db5fad1-d849-3908-ae5d-7be3962c8741.roa
File:                     3db5fad1-d849-3908-ae5d-7be3962c8741.roa (raw, json)
Hash identifier:          QC+YF58u/r41akuuANQW1QkUPrx+ALik7T9U3zOERak=
Subject key identifier:   CF:62:7C:6D:17:04:4D:F0:AD:92:3E:7D:63:EB:C5:23:91:B7:13:2B
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584A23C00162FFFC24C317556100
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3db5fad1-d849-3908-ae5d-7be3962c8741.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:fdeb:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:01:62:ff:fc:24:c3:17:55:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=1df8a6df-6922-49fb-b8c9-89e837f3b8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:78:8f:21:35:1a:7f:59:f0:3d:a9:bf:23:
                    b8:90:ee:fb:50:a5:96:9c:76:12:74:c3:a2:06:d1:
                    10:f7:67:d4:3c:1e:70:0c:f4:d2:ec:2c:b6:48:76:
                    b3:e9:cf:5e:09:f9:1d:53:7d:33:e8:bf:3c:be:20:
                    cb:df:a3:e7:88:5e:e7:ae:0d:bd:7c:ba:d0:52:71:
                    e8:f5:ca:a7:65:a4:f9:9f:4a:04:fd:6e:3c:e1:6a:
                    55:84:8a:56:c4:bc:42:38:de:a7:ea:ee:a2:02:08:
                    bd:8c:c2:af:0d:71:d6:57:0b:41:4e:17:74:77:ac:
                    4b:65:94:2d:1f:e6:f5:57:9b:ac:6b:91:2e:16:e4:
                    0f:87:99:c3:ef:9f:8c:05:ad:37:c1:20:fe:c2:4c:
                    03:d4:91:f1:fb:4b:2d:38:42:48:93:17:97:31:9c:
                    db:03:08:08:50:4d:72:0f:a1:89:b7:0c:5a:dd:c5:
                    ba:bf:27:8e:4c:92:b4:81:78:ca:f2:9a:b9:27:e7:
                    b6:5f:ee:be:9e:b4:b4:f2:04:64:36:d8:37:74:c6:
                    cb:7f:0d:aa:0e:ff:09:e5:4d:0d:75:d1:25:d5:a1:
                    b5:1e:a2:c1:87:5b:6b:ac:27:f9:f1:5f:1b:63:11:
                    83:2f:bd:7f:8a:91:07:1e:d9:81:ff:ae:f0:0f:e8:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:7C:6D:17:04:4D:F0:AD:92:3E:7D:63:EB:C5:23:91:B7:13:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/3db5fad1-d849-3908-ae5d-7be3962c8741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:2a:0b:a0:cb:cc:2c:54:22:35:d4:c8:5c:49:bb:88:ef:
         f9:3d:98:d9:1c:b1:74:69:ec:dc:17:5f:4a:66:7e:6a:23:2a:
         90:bf:5d:61:2c:f4:44:0f:24:33:e2:ca:fd:e8:e9:e6:c7:73:
         28:73:ee:36:39:b0:75:85:9d:08:dd:02:21:19:ca:f4:4e:8e:
         e6:ae:aa:f5:1b:b7:41:e3:5d:82:76:af:c7:aa:b3:42:fb:6b:
         23:fb:5e:8c:37:57:51:4d:04:70:d9:fe:af:78:c5:bd:a4:92:
         7e:c5:f9:99:61:5b:5c:5b:fd:3f:74:62:47:0f:55:60:da:55:
         12:a4:91:00:31:54:61:d4:38:a7:8e:84:52:f7:88:4f:80:f9:
         7a:5a:f7:57:75:75:b5:4b:e4:c9:91:47:22:98:a1:f5:be:8e:
         77:8d:da:dc:8f:8a:27:33:71:d2:0b:57:ec:25:56:cc:9f:79:
         2e:bc:de:8a:b9:d7:15:dd:ac:f6:a2:6f:00:8c:b9:ce:e6:f4:
         4f:f9:a5:83:ad:5e:22:44:70:3b:b0:31:72:95:00:59:88:17:
         eb:03:7a:51:77:f3:cd:95:5b:94:5e:2f:9d:89:cd:19:c5:26:
         cf:01:e4:f2:18:37:e8:0c:c3:2a:05:07:34:74:90:54:61:bc:
         c6:2c:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:02:12 2025 by rpki-client