Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa
File:                     9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (raw, json)
Hash identifier:          sRMse0z7FADuBk4yImw6y+P6DOe+bLu+FS6pkXGpsnE=
Subject key identifier:   7B:6C:E0:1F:9F:53:1C:DF:22:05:34:C5:55:FC:F2:AB:E6:1F:F8:CE
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584A23C011A90ABC61CF0ADCE600
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     33039
IP address blocks:        2602:f95c:7a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:11:a9:0a:bc:61:cf:0a:dc:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5282532d-8daa-46b1-a7cb-f79c6871a74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:a9:28:e0:37:01:42:d0:68:87:f2:b3:66:
                    4d:86:22:bc:34:4e:14:e6:a9:27:7c:49:18:ef:f1:
                    07:e6:b9:54:c9:8f:74:43:3d:2a:7a:38:a1:0d:10:
                    c0:5d:2b:16:95:ff:f3:8a:6a:99:1a:40:e7:33:d5:
                    78:bc:5e:34:ec:aa:0e:fc:73:c2:06:33:be:52:72:
                    d8:14:4e:57:bd:7d:b8:8d:5e:53:31:f5:5d:e6:61:
                    ed:9b:51:92:6c:ee:b1:30:17:ae:a2:01:87:53:ea:
                    44:77:a1:ee:13:fc:7b:bb:dd:42:91:1d:35:5f:99:
                    82:68:16:69:4e:f6:54:27:b4:f7:23:f8:3c:2f:a0:
                    13:b6:1f:fe:5c:04:ec:18:80:3d:39:6d:e0:55:8f:
                    53:6e:40:ef:16:a6:0a:eb:50:a5:75:8e:a9:e5:ef:
                    27:3d:07:dd:d5:40:65:74:a0:15:e3:8f:d7:15:cd:
                    d4:cd:3f:3d:65:de:3b:14:d4:9d:f9:6f:7f:ce:57:
                    3c:2c:d0:9d:80:16:d5:0a:c6:3b:6a:86:31:21:a7:
                    28:d4:72:0b:ed:df:09:20:de:92:56:c1:98:90:e2:
                    79:5e:5b:62:99:04:be:9b:79:ff:de:5c:02:4c:17:
                    e9:ea:cc:aa:4e:4f:54:99:91:b7:dc:17:9e:52:22:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:E0:1F:9F:53:1C:DF:22:05:34:C5:55:FC:F2:AB:E6:1F:F8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:7a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:74:0f:2a:da:8a:9e:14:a0:04:1c:75:93:64:6a:e9:05:
         be:e7:07:5f:5f:1e:23:29:04:f7:f5:3b:2b:00:60:ef:a5:3a:
         67:6b:07:79:40:9b:93:bd:2c:2a:0d:04:6e:70:35:6a:1e:a1:
         a8:b3:36:68:45:45:23:de:56:f6:dc:fd:e6:aa:df:73:ac:72:
         cb:3d:4e:e1:f9:0f:ad:2a:3b:77:ef:99:ce:29:30:ef:c2:6d:
         4a:e3:24:96:00:e3:b2:ea:6e:a5:6f:89:a7:ae:1d:84:99:5e:
         55:7a:1b:3c:6d:cb:bc:b9:dd:ee:76:53:4a:a0:a4:0e:50:59:
         92:06:8f:d9:21:72:31:67:62:cc:26:14:e7:df:3d:db:ae:d8:
         dd:35:09:7f:28:4e:92:97:e8:c0:45:26:b9:c5:09:de:ac:df:
         19:97:49:c2:f5:ec:db:24:b6:a3:9e:e8:ec:a3:82:11:a8:0b:
         49:d1:f0:20:c9:56:75:68:0d:4e:80:95:25:a9:da:cc:c3:85:
         1d:0a:fb:77:cc:4e:3c:ab:fe:4b:d2:53:41:8b:91:06:94:da:
         a7:b5:bc:b6:09:2f:08:df:a8:2d:74:d8:7d:2b:db:7a:34:09:
         14:d7:b2:1d:02:52:17:82:e2:ea:89:1d:6f:c8:ba:48:43:e8:
         a3:34:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:39:01 2025 by rpki-client