Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa
File:                     fc404d92-05de-37fc-a4ea-2ec708d5d199.roa (raw, json)
Hash identifier:          2bCwKrQAj4v/1trkZTDZwEMOeA+DspEE2cOvYMSkzf8=
Subject key identifier:   44:A8:F6:74:F6:BE:D7:DD:DD:FC:4C:4D:DA:80:E3:81:66:63:84:26
Certificate issuer:       /CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
Certificate serial:       010D0C9F4328584A1F901E098ED4DB21042F5380
Authority key identifier: B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     11972
IP address blocks:        2602:fa29::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1e:09:8e:d4:db:21:04:2f:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=9898d1a6-97d9-4829-974a-57638d3ef2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:eb:98:6f:58:1e:6a:ba:e5:8b:cc:a0:ca:
                    f7:cb:a8:06:0a:2d:b3:20:66:08:cc:19:f9:9d:5e:
                    62:d7:b9:2b:d9:cd:9d:47:a4:61:1a:11:ff:c1:a6:
                    90:fd:7a:65:c5:2e:67:3b:0a:54:2a:46:ec:ed:53:
                    8f:c8:ac:25:a5:92:7a:43:e3:87:b0:44:71:3f:3d:
                    0a:90:55:55:4a:71:3d:59:9c:21:4a:a9:f2:40:f5:
                    bc:db:57:31:40:9a:75:b4:e7:fa:56:3e:4c:e1:ce:
                    98:36:64:4c:24:f9:8b:26:a2:c3:a9:1e:73:24:07:
                    07:72:76:b7:1e:f3:4f:e5:89:d9:cf:ad:6b:56:37:
                    cc:99:ae:e6:8e:87:d5:45:e6:db:e9:ed:20:1b:af:
                    9c:be:75:16:b3:7d:00:fa:31:c1:89:f9:c7:94:eb:
                    99:0c:97:83:2b:ba:9b:3a:a5:a4:b7:49:97:90:2f:
                    ee:d3:c9:e8:2e:89:74:04:0b:9a:d9:52:77:f9:45:
                    0d:c6:38:cc:09:6e:1d:14:41:92:34:12:bf:c9:e6:
                    65:25:32:c4:83:06:cc:28:d2:e5:70:b7:e0:bf:8e:
                    45:c8:70:f6:92:b6:07:08:d1:c7:3b:b2:e7:fc:e4:
                    f6:ce:99:50:d7:27:ae:49:66:1c:99:fe:e1:1b:1d:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:F6:74:F6:BE:D7:DD:DD:FC:4C:4D:DA:80:E3:81:66:63:84:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa29::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:a7:f9:6b:ba:f9:06:74:c0:e5:05:7b:7f:06:30:e3:43:
         96:0a:cd:cf:ce:f4:92:5c:1b:c8:4e:4b:53:35:c5:66:64:5f:
         79:36:77:d8:02:82:09:15:db:dc:26:7f:11:9d:c4:1a:99:43:
         33:8d:6b:a5:17:10:09:1e:2c:ca:67:2f:64:44:c8:ac:e8:e6:
         07:f9:1e:90:76:af:f5:d5:5b:fe:55:ae:28:47:e8:6f:91:49:
         0f:0a:41:b7:be:02:17:03:bd:fa:ed:f7:9f:b5:1f:30:c3:6e:
         9e:36:73:57:48:78:a9:8a:8e:c7:85:c7:90:2c:15:2e:82:ae:
         aa:32:aa:5b:f3:27:9a:c9:8d:cd:79:18:16:06:80:ba:8f:e8:
         3b:44:83:b2:7c:63:30:b7:3c:ab:13:d0:77:6f:cf:ca:f7:6f:
         68:9e:3d:8b:f6:4b:26:33:c9:e6:5a:50:f8:14:f2:6d:e5:29:
         37:0c:ec:8d:40:71:7f:bb:bf:88:c4:e7:b7:53:fb:25:41:a9:
         37:f8:dc:26:4b:6a:f9:04:d8:69:ac:88:e5:83:2f:71:a5:5c:
         bf:de:be:82:47:33:f3:c8:e5:1a:f6:c9:3b:29:8e:99:e2:99:
         f7:2f:f7:7e:be:89:f4:9d:9a:f2:65:5f:be:8a:47:f8:76:8a:
         1a:60:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:48 2025 by rpki-client