Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
File:                     8739209d-0492-3814-9eef-35e5f7d13167.roa (raw, json)
Hash identifier:          ckjMmQj3BHVsDyFuNWSlDgA1LNhgtWVfCHSp0LrOiYI=
Subject key identifier:   89:76:DE:5D:33:0C:F9:00:F9:E9:A1:8D:F6:80:D0:BF:52:50:9F:C1
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F43285849DF5A748EDE095F26FA369040
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30690
IP address blocks:        2602:f99b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:74:8e:de:09:5f:26:fa:36:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=656f1fa6-8e15-4f62-91a4-256586112f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:64:37:43:57:a4:e9:77:88:97:8c:31:1e:
                    8e:56:4b:05:da:85:c8:5d:93:8f:0d:25:fd:9a:cb:
                    d4:87:58:fd:01:be:3a:d8:ca:c1:24:ad:ef:09:5e:
                    3d:b3:cc:07:3b:3e:70:39:68:4e:53:51:d6:49:53:
                    ac:ad:27:bd:16:59:a2:bb:19:9e:c0:bd:00:e5:2b:
                    d2:e4:b6:46:15:bb:f7:ce:c2:7d:01:9f:43:be:71:
                    82:cf:e3:d6:a4:dd:08:5a:88:86:87:ff:04:03:06:
                    c9:0e:cd:19:f5:4b:8e:96:23:d1:54:3b:78:b4:e4:
                    79:d9:af:cf:8b:08:78:1a:00:11:e0:e5:a2:36:89:
                    c1:bd:87:66:7e:dc:8b:91:55:07:8a:3e:92:d7:25:
                    89:b8:2e:1a:7a:ee:ee:9d:9f:46:8c:0c:97:9b:5c:
                    6e:60:f1:4f:62:cb:fd:8f:d7:d4:63:9c:dc:91:65:
                    be:8e:29:1a:5f:19:26:3a:9f:f8:27:33:87:3e:ef:
                    c8:cc:4e:70:dc:fc:a2:09:a6:ee:0c:10:44:43:11:
                    38:97:8d:5f:29:3b:92:a4:7c:3a:59:dd:bc:46:2f:
                    91:d8:5e:58:db:9c:87:8c:55:dc:93:95:1c:a4:72:
                    08:12:5a:cb:f3:b5:0b:a3:04:eb:27:d4:e3:34:52:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:DE:5D:33:0C:F9:00:F9:E9:A1:8D:F6:80:D0:BF:52:50:9F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:78:fa:8d:42:f4:04:f5:2a:17:0c:8a:6c:fc:3f:5c:ae:60:
         c1:3a:f5:a9:05:37:25:15:0b:86:c6:80:27:43:1d:80:b2:bc:
         08:29:71:be:c4:b2:53:a1:ca:cc:be:c2:19:b1:ee:fd:ce:fe:
         db:03:67:68:d9:b4:86:16:81:bd:40:eb:86:a7:e4:be:92:b5:
         e7:43:e2:77:82:a2:55:ce:0e:2d:5a:80:38:05:5a:0c:b6:62:
         fd:39:f0:0b:7f:f4:cd:ea:0f:2d:bd:4f:45:7e:d5:2a:f4:4f:
         a8:d3:ee:48:07:e7:80:6c:fe:42:e4:a7:c1:c3:53:9a:49:e9:
         57:21:85:e6:97:6e:c0:f6:34:e1:30:8e:46:62:25:e8:8b:df:
         0b:d2:e7:ab:22:64:1e:4f:63:91:ee:b8:d7:96:03:2d:29:77:
         7b:ff:52:33:f5:b8:e9:a8:02:f9:82:3d:33:a6:a4:6c:fa:86:
         cc:4e:34:4c:29:d4:18:f3:5f:22:99:6e:a8:ec:e4:54:44:13:
         42:c2:79:e6:4c:ab:1f:7b:ed:33:44:47:09:19:57:12:25:be:
         a8:fe:b1:60:af:3d:b5:b9:99:12:c5:14:a7:d9:8a:46:06:77:
         69:2e:63:a9:58:43:13:76:82:4c:03:12:c0:ab:bb:66:e5:54:
         33:31:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:51 2025 by rpki-client