Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
File:                     48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa (raw, json)
Hash identifier:          BYQz0P2toOYnO66O6joFOcd1CmvTZ6UgxvrH0KwJWMY=
Subject key identifier:   D0:41:4D:E7:60:D9:D3:1E:32:3D:E6:2B:9A:93:9E:BA:DC:1A:7B:6C
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584A0F5E64FAE40DB2CE14E83390
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa
Signing time:             Mon 02 Jun 2025 17:48:05 +0000
ROA not before:           Mon 02 Jun 2025 17:48:05 +0000
ROA not after:            Sun 31 Aug 2025 17:48:05 +0000
asID:                     14639
IP address blocks:        2602:fd26::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:5e:64:fa:e4:0d:b2:ce:14:e8:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Jun  2 17:48:05 2025 GMT
            Not After : Aug 31 17:48:05 2025 GMT
        Subject: CN=adfc59a0-55d9-465e-ade7-18f5ad1fc50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:76:ca:28:62:9e:28:e4:7a:5c:a5:34:d5:
                    13:92:be:6c:98:97:dc:5d:96:2e:33:53:54:f2:df:
                    f6:dd:6d:e2:f3:4c:c8:d7:f7:ed:0c:8f:e4:5e:9d:
                    a3:e6:85:57:e7:f9:da:fd:cb:1f:ce:aa:0a:14:d2:
                    d6:5d:e7:f9:38:7c:4b:6c:71:6e:e4:da:73:94:69:
                    ab:a0:84:3e:74:94:33:ed:63:3f:c3:bb:9a:68:30:
                    24:11:a8:5a:2f:e1:88:73:6c:67:c2:70:27:90:b7:
                    94:f9:54:52:f9:87:b8:35:a0:f4:d0:2c:a1:f8:8d:
                    37:c5:9c:69:40:c5:e5:d1:de:1c:e8:38:94:fa:36:
                    26:42:66:02:99:c3:08:d7:30:c0:c1:cf:3a:a4:56:
                    4e:4d:93:13:ab:aa:07:58:27:2a:34:e6:27:5b:e9:
                    33:62:3a:08:7d:76:9f:8f:11:52:36:e8:95:55:93:
                    bb:ad:80:ce:98:45:5d:61:d7:7f:cc:67:19:68:06:
                    24:74:db:e6:1e:98:2e:29:a0:3d:6b:06:b7:40:4c:
                    c4:bf:62:49:fc:4c:29:b6:ca:84:78:12:cc:f8:31:
                    6c:b5:56:ac:62:d1:d8:6e:f6:22:31:d2:72:2f:07:
                    3a:9c:d9:4d:6b:50:a8:ad:53:90:8b:12:6b:5e:d9:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:41:4D:E7:60:D9:D3:1E:32:3D:E6:2B:9A:93:9E:BA:DC:1A:7B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd26::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:66:91:91:98:12:5c:67:32:17:7a:6b:6f:ef:51:b0:e9:
         5e:44:43:37:61:73:50:ed:c8:10:77:d8:18:33:a3:ce:aa:db:
         46:79:60:f1:07:d6:6f:c7:d6:9f:1d:5e:8f:c4:4f:d9:4c:53:
         50:05:74:d6:51:e7:82:82:71:39:9f:e5:d2:30:fd:6a:8c:ea:
         4b:a5:39:4a:1b:50:26:f8:7b:1b:74:51:d9:0d:54:6d:cb:dd:
         8a:d6:f4:d4:cc:18:bc:81:88:4a:d1:3b:2c:d1:af:c7:3f:fe:
         ee:d6:ce:3a:f2:28:fb:5b:34:53:9e:1f:03:01:ff:12:31:3d:
         4e:51:f4:76:72:11:8b:ca:8a:43:2b:b6:52:5e:17:7c:c2:74:
         87:3d:a8:ad:09:52:b0:c1:aa:bc:e8:d4:42:ec:e3:76:1f:d8:
         54:ec:05:cf:3e:ef:94:17:66:e4:58:fa:3f:b3:8a:78:12:b5:
         8c:08:ff:a5:e7:e7:91:91:ea:6e:82:a7:de:4c:88:c6:ae:64:
         74:2b:d3:12:cf:e8:1c:5e:e3:3a:94:75:58:c3:a7:67:aa:91:
         17:a5:df:ea:c2:dc:35:64:ae:35:88:3f:dd:91:25:9e:88:bb:
         87:e6:bf:0c:cd:ee:a7:61:e0:0d:90:7d:f4:ad:d7:90:59:e9:
         d9:c1:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:55 2025 by rpki-client