Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
File:                     2178ac25-e308-3810-99cc-10f24135d13d.roa (raw, json)
Hash identifier:          9oxTn1Qil3yRgEVjvAD7dY6yAknQZbSsGQDAhmQQgb8=
Subject key identifier:   34:F4:1C:F0:C0:07:0C:7F:EA:D4:DE:29:60:80:88:17:FD:DF:BE:05
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328584A07D5265EF3155E52771A2D80
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     16970
IP address blocks:        2602:800:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:26:5e:f3:15:5e:52:77:1a:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=66c064bd-d955-496a-a691-7f88cb5a60dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:7d:8c:e6:bc:d9:5a:1a:ff:db:06:ae:92:
                    73:8c:78:ba:b4:3b:e4:2a:89:03:0f:5f:24:eb:58:
                    b0:71:89:93:f6:51:b7:7a:e8:c6:e4:57:54:9e:94:
                    7b:83:35:45:0c:a3:3b:04:c4:a4:f5:be:e5:b5:57:
                    2e:ae:b5:53:b6:b6:e8:31:53:75:75:cc:52:92:e4:
                    89:a5:5a:8c:fb:3d:69:40:97:9b:41:f3:18:48:5a:
                    11:4d:96:06:fe:4d:44:70:73:b3:48:61:d3:b7:ce:
                    d2:28:84:0d:6d:e4:e0:e8:0a:2b:e4:23:03:58:05:
                    ac:58:bf:3d:88:e1:6e:2b:0f:2d:df:00:c7:48:d3:
                    6e:25:7e:c6:43:43:1b:87:c7:b8:cf:92:26:84:99:
                    ab:d1:3f:ed:1f:54:67:be:96:37:b5:4b:a2:7f:53:
                    0c:4c:3e:8f:4c:42:f8:54:25:a9:ea:27:15:fb:df:
                    04:38:d1:73:99:ad:78:33:b7:d1:d1:f5:bd:a6:fa:
                    c1:36:da:19:55:e0:ee:ed:9f:18:ca:9d:a1:0f:e3:
                    56:15:fa:a5:5e:db:5e:70:d0:2b:f6:32:6e:99:2c:
                    81:81:b0:61:95:dc:b7:e7:85:f0:cf:9c:b1:21:f2:
                    2b:62:d2:16:d0:b8:88:93:04:f4:95:a2:79:3b:b0:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:1C:F0:C0:07:0C:7F:EA:D4:DE:29:60:80:88:17:FD:DF:BE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:87:c8:d2:36:37:78:34:3f:63:c6:b9:59:34:f0:49:12:fc:
         eb:29:af:92:19:8c:1e:68:6f:8d:27:1b:5c:5d:f0:83:84:55:
         de:4d:f5:f1:79:0e:77:80:99:c0:c1:6c:98:40:40:2b:47:ac:
         5b:52:ff:7c:8c:36:92:70:9d:a5:70:77:79:40:3b:f8:06:80:
         93:c6:45:ae:60:32:c1:ef:00:6b:24:a9:b9:54:da:bf:58:c8:
         4d:5c:31:e5:9b:d9:ce:d5:42:e5:24:94:22:79:3d:33:ac:a0:
         11:c6:a3:ab:27:a8:85:be:5b:70:58:8d:7d:74:20:2d:34:69:
         e4:57:cc:57:71:81:e3:a9:1d:ed:62:2d:28:59:a7:ec:97:55:
         b2:58:72:c1:3d:25:c3:45:be:c5:d1:4f:86:27:ae:8d:32:19:
         6d:eb:17:cd:62:65:c4:64:ad:6c:f5:e0:29:e3:7d:f8:21:2b:
         8f:20:22:a9:fb:31:56:8a:3b:cf:a5:3e:d2:61:86:65:3e:85:
         2e:c7:44:b2:a4:f9:d4:2e:2a:8d:9e:6c:3e:bc:1e:8b:54:50:
         04:ab:5e:59:37:e5:e0:85:cd:f1:b5:7e:f6:c2:5c:9a:87:05:
         90:e5:f4:54:78:06:fa:2e:17:c8:79:0a:d4:64:99:62:4a:39:
         7e:cc:ae:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:02:20 2025 by rpki-client