Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
File:                     3d825415-a280-3181-81a2-705dc42f29fb.roa (raw, json)
Hash identifier:          MYs22J+Of0Cy0ybQ6CXmzeVaonJahGKTmlIh+NDoLq8=
Subject key identifier:   1E:92:6C:D4:5F:17:85:72:9A:43:58:A6:27:CE:28:58:31:61:0B:05
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584A00DAC5AEC88DC119F066E166
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     63150
IP address blocks:        2602:f988:86::/48 maxlen: 48
                          2602:f988:87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c5:ae:c8:8d:c1:19:f0:66:e1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=aea690f3-8f41-417e-b84a-e5a920064993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:32:bb:9e:12:b6:b4:d3:69:cd:3b:23:60:
                    e0:ab:39:e2:6b:d5:31:7f:8e:bd:be:b3:6e:4b:e3:
                    4e:09:5f:5c:77:b1:7e:fc:60:8f:e8:fa:5e:22:6a:
                    9d:c2:ca:cf:8c:0c:79:dc:92:eb:26:b9:c2:36:d7:
                    75:1c:de:85:9e:82:53:fc:cd:00:b3:db:46:27:b6:
                    30:fd:a1:0e:6c:cc:45:f0:fd:9c:ec:ee:54:7e:37:
                    52:05:60:3f:56:b8:59:29:29:0a:5b:fd:ec:ad:f0:
                    2b:9c:43:2b:ab:9e:d3:09:9f:17:a9:fe:6f:24:3f:
                    5a:63:aa:48:43:db:be:2d:4b:93:4c:e8:7b:ff:80:
                    20:b5:2d:cc:38:88:84:f9:8d:7b:a0:fe:75:67:f7:
                    fa:7b:86:7f:39:55:df:3a:a8:0d:10:3a:9d:39:54:
                    21:eb:46:1d:05:72:26:8f:bc:b0:0b:2f:cb:ac:83:
                    65:87:b9:bc:09:5f:99:be:1c:ba:f4:8b:09:ca:e8:
                    98:72:3c:a9:48:99:80:8a:ca:41:a7:66:d2:a2:da:
                    73:ff:28:23:a3:e2:60:14:09:2b:f8:ec:5d:d4:98:
                    12:13:67:86:15:ad:f0:77:b4:97:35:f0:57:56:7b:
                    e9:5b:49:9d:17:0e:29:ae:76:92:60:dd:d0:1e:04:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:6C:D4:5F:17:85:72:9A:43:58:A6:27:CE:28:58:31:61:0B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:86::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:8a:b5:c5:db:45:b2:22:bd:c0:9d:45:57:8a:68:dc:84:
         4a:e1:0e:84:09:26:4a:0a:89:19:e9:1b:9d:8f:74:7c:16:55:
         70:f9:db:0b:d2:5b:fd:45:44:19:82:f2:99:3a:92:3c:29:ba:
         05:f7:ba:be:31:80:ea:b8:1b:51:1a:8d:50:e2:b6:9b:ca:3e:
         0a:f0:b9:1d:83:9d:57:95:d8:ec:4b:a8:18:19:bb:39:7e:c3:
         d7:13:a6:53:0d:2d:81:8c:20:d5:7f:94:7d:50:37:37:e8:e5:
         bb:9e:bd:ed:28:7a:d5:32:4f:77:2b:5a:1c:a5:f7:43:1a:1a:
         5e:f0:02:d7:41:bd:6d:a7:20:94:4b:ae:21:8b:80:39:0c:5f:
         f4:94:07:73:d2:d8:12:cf:2b:f2:99:64:09:89:0e:ac:ff:c0:
         3d:b4:df:16:88:85:c6:37:bc:19:35:92:cd:eb:cb:19:ce:bd:
         56:81:d6:51:20:b2:73:5d:e0:5e:e8:ae:60:98:b3:b2:45:40:
         94:c8:88:7b:1b:4f:32:e9:08:ea:e6:a3:59:19:09:5e:68:2b:
         d1:6b:41:e6:1a:b9:0f:fe:d8:f7:57:09:0d:6b:1b:5b:4e:0a:
         24:71:76:8e:39:9f:72:ae:13:95:aa:a4:de:19:37:aa:29:bd:
         cc:ec:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:28 2025 by rpki-client