Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa
File:                     51543945-6eec-3f2f-877f-9d724376ec79.roa (raw, json)
Hash identifier:          yigsYNhxw2TWhaSOKMnPvJfC+JSYiKVqPAErUMOPCUw=
Subject key identifier:   1C:FB:8E:E5:29:2D:8D:1A:A7:51:12:5B:60:DE:89:EC:D4:C3:DF:47
Certificate issuer:       /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial:       010D0C9F4328584A173008C5A34B5E5D14EA7000
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     139257
IP address blocks:        2602:f969:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:08:c5:a3:4b:5e:5d:14:ea:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=88966ac9-f118-4041-a1bc-311491f2e446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:a7:ba:3e:8b:8f:b7:58:4a:ca:f5:d2:4a:
                    e9:75:a1:3c:09:b7:7e:ba:75:6e:cc:c0:22:9a:b2:
                    6e:19:99:aa:05:55:ad:d1:bd:61:d7:01:28:b1:b0:
                    6e:d4:53:e6:4c:57:aa:00:71:4f:b6:69:6d:49:14:
                    2a:e5:5f:bb:1a:5d:8c:3f:45:3b:02:80:dd:67:d7:
                    93:20:d9:8c:f7:1c:70:49:1c:75:4b:51:04:92:cc:
                    01:dc:f5:00:82:30:28:de:bf:2d:38:a2:1e:7f:91:
                    f2:d8:89:b3:f3:ef:46:15:82:93:5a:95:4f:52:ef:
                    8e:df:d3:61:1b:48:b7:ff:e6:2f:11:37:11:f3:f3:
                    5b:9c:f2:d5:14:e5:d0:de:52:03:aa:c7:f1:9f:ff:
                    19:85:80:80:bb:e2:14:37:e5:cc:1a:e1:3d:be:74:
                    bf:b1:b5:63:13:97:5e:48:0c:55:14:9f:c8:a2:31:
                    f9:19:a4:b5:3f:c1:aa:f9:6d:44:83:a6:46:86:fa:
                    a4:c2:04:7c:c0:fa:8a:2e:07:e8:ab:77:e3:fc:98:
                    21:87:20:ab:28:02:93:16:6c:79:33:1a:df:53:e5:
                    8a:51:99:a8:a0:e2:ee:d4:1f:50:ec:c6:58:2a:02:
                    12:a0:99:52:2b:85:b3:55:99:30:7d:3b:6e:05:1f:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FB:8E:E5:29:2D:8D:1A:A7:51:12:5B:60:DE:89:EC:D4:C3:DF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f969:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:ac:d4:11:16:21:48:29:30:12:1f:8d:00:f6:69:34:b3:
         72:a5:7b:22:ae:d5:80:d0:9c:26:85:c9:9b:66:a4:77:59:a1:
         35:c0:3c:b9:ad:d9:0c:c6:d7:e6:df:50:6d:76:b6:3b:01:57:
         e1:3b:0b:3f:15:63:d1:9b:52:98:c2:ed:33:6a:58:9e:df:1d:
         6a:cd:35:cc:0f:40:16:42:8d:84:1f:cc:fc:40:64:d0:d1:62:
         78:75:54:99:87:32:8b:24:0e:df:6f:a5:76:f0:01:fa:39:84:
         06:97:8b:ab:9a:fd:91:4b:24:92:09:a7:43:f7:51:7f:dd:b7:
         b7:cc:72:12:40:7e:44:c4:c0:c1:00:64:09:23:de:50:8e:41:
         21:2c:02:b0:1e:15:f1:d0:6c:27:eb:0f:5f:d7:9d:1b:55:57:
         52:ea:3d:94:91:27:a9:07:02:c8:5b:36:6b:f9:12:f0:be:39:
         1b:67:a3:03:92:b9:ca:2d:d1:89:b1:4a:03:27:4d:22:30:f0:
         f7:2f:6d:67:b6:6f:c4:58:37:f4:84:2a:57:14:c8:3d:2c:7e:
         90:c7:d4:7b:26:88:e9:ac:86:56:30:d8:81:60:cf:79:c8:ab:
         6c:08:43:f3:9a:04:b5:1a:f6:10:8d:2e:22:11:f8:78:86:1e:
         0e:7d:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:43 2025 by rpki-client