Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa
File:                     f920aa5a-1977-33fa-9434-afde31a0d21c.roa (raw, json)
Hash identifier:          6YOpCIsvNO6VOSN6SQX+nJP84fIFb4fTalbVtujsJH8=
Subject key identifier:   2C:8C:7A:46:63:1E:38:D6:28:14:63:FA:8E:6F:F4:B4:D3:85:85:D6
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849FB452AE16644DA68A9C48780
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     4186
IP address blocks:        2602:fbdc:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2a:e1:66:44:da:68:a9:c4:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=8c8363d8-9a9e-4055-9d84-c22b5298b314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:fe:7e:0f:6f:fa:14:04:96:a1:f8:4b:c7:
                    02:24:1d:34:15:82:b0:56:17:8f:52:ef:e7:14:d3:
                    dc:d3:0d:ba:e8:84:65:a4:c0:14:57:23:77:05:42:
                    e2:5f:11:0b:2d:c9:21:5f:4a:5e:0c:6f:40:9b:ce:
                    e4:98:58:86:ea:c8:ff:47:ff:ac:38:31:10:6f:de:
                    9d:08:7e:d6:6e:bf:35:7e:28:79:3b:80:62:76:43:
                    7b:9d:66:49:94:3c:65:b4:23:3f:24:4f:6f:5e:de:
                    1d:73:f9:8e:3d:6b:7b:d4:44:ad:df:84:6a:ec:0c:
                    a1:57:cc:a9:bf:76:3f:0d:33:11:e9:37:75:e6:01:
                    08:c2:f8:2b:f4:3f:31:28:95:0b:d5:3a:9b:7b:44:
                    97:da:34:d4:8f:c9:ff:45:04:fc:b5:60:a4:09:2a:
                    2b:24:a2:e4:66:dc:4c:c3:e6:aa:50:47:3b:1e:08:
                    57:c7:1e:9b:9c:ec:2c:c7:4e:47:cb:bf:7c:31:ed:
                    2b:26:1c:41:42:a0:41:ba:c9:4f:dc:24:18:f3:e0:
                    56:c7:08:8a:d4:4f:70:44:81:50:87:17:1e:a8:fe:
                    1b:5a:ee:4b:3c:1a:71:ee:10:8c:d5:bf:5f:93:46:
                    55:d3:8d:e3:38:d2:e1:92:0d:48:90:a0:38:f3:58:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:7A:46:63:1E:38:D6:28:14:63:FA:8E:6F:F4:B4:D3:85:85:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:69:2d:59:7e:c1:5d:50:65:b7:2d:b9:50:c4:49:64:dd:d8:
         39:4c:35:47:c3:4a:b0:4e:82:56:88:c2:1c:b5:ef:19:17:86:
         d3:d1:67:04:8d:9d:af:d8:5c:18:df:29:3e:62:30:7d:92:55:
         d7:ff:5a:0d:f6:fa:38:1c:1b:0f:7d:ae:a4:74:ae:82:21:e7:
         1d:9b:c8:9b:2f:52:a4:f9:59:ec:c6:34:f6:1c:e9:5b:21:6f:
         7a:7c:d3:97:a2:a1:ea:28:38:50:d3:83:da:b8:da:bc:c4:e7:
         e0:ec:c9:62:d5:91:52:bd:c8:2d:28:40:a8:e4:0c:cf:f6:67:
         a1:10:ac:31:2a:cb:2e:0d:3d:2e:c9:e0:c8:eb:52:b3:bb:09:
         57:55:cd:43:92:4b:49:d3:fe:a9:04:de:65:ba:e5:e7:f3:79:
         39:ee:11:2c:34:34:19:f7:ef:6e:15:96:cc:4c:39:c0:52:f1:
         6e:d2:1a:91:80:27:d1:26:e4:75:16:ac:c8:6b:70:52:c1:49:
         22:fb:bb:ab:6c:4a:5c:2f:09:5b:00:af:b0:f2:a7:58:50:d6:
         26:98:47:5e:52:3b:84:81:8b:71:18:47:12:18:91:ff:e2:ae:
         6d:fd:47:51:72:4f:d1:c8:03:b6:be:a8:02:3d:08:d1:f3:e3:
         e9:18:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:44 2025 by rpki-client