Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa
File:                     abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa (raw, json)
Hash identifier:          AjQ5iMSpNYBK7V5MKFh60sMABGtNqye26NoSKNfzB9k=
Subject key identifier:   1C:5D:AA:98:B1:5E:04:94:70:98:53:76:20:5B:09:48:60:A6:2B:25
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F43285849E7BA80D58D30206552868320
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     63183
IP address blocks:        2602:f7fc:400::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:80:d5:8d:30:20:65:52:86:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=68bb0e8c-5d15-420f-bf99-3019d8a2b2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:98:47:a9:08:d6:fe:e0:70:63:4b:e2:f4:
                    64:50:f8:29:88:71:34:61:b2:09:b1:cc:fc:77:40:
                    18:bd:2c:c0:e1:4e:c1:b2:17:19:8f:27:69:20:f4:
                    1c:ba:43:80:6c:5a:70:6a:5a:bc:74:49:14:f8:24:
                    d7:39:5b:bb:b8:db:dd:11:73:45:5b:a1:09:a5:23:
                    33:74:6c:d1:0c:4f:23:8a:d0:3f:00:11:9d:d7:02:
                    06:34:0a:94:af:e5:24:85:e6:82:73:58:cd:61:06:
                    55:f1:81:4e:ca:52:e0:11:af:95:ea:7a:db:ff:9a:
                    66:55:64:2d:be:9c:17:36:d5:98:91:33:6d:2e:c6:
                    4a:24:de:79:2d:9a:71:01:ea:09:bb:23:b0:26:7b:
                    60:fc:35:f3:cf:14:12:9d:ff:98:a0:6d:5a:7b:14:
                    ee:1e:0f:a7:68:2c:ea:f2:e4:3f:39:33:3c:80:f9:
                    a3:48:95:83:c3:d0:66:59:8c:53:8d:78:a6:f2:d5:
                    8f:65:cb:eb:6b:3d:51:a7:85:b9:df:f1:c2:0e:5d:
                    75:fb:c5:ea:04:9c:1e:61:3b:27:9a:f7:e4:a4:dc:
                    f4:7d:a2:0b:1b:6e:ff:22:47:49:70:8d:8e:70:b7:
                    63:db:17:47:bd:13:eb:dd:29:a0:de:a8:0d:66:27:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:AA:98:B1:5E:04:94:70:98:53:76:20:5B:09:48:60:A6:2B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7fc:400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:72:7b:dd:9d:9f:1b:20:15:63:56:00:eb:4d:fc:bf:0b:
         11:54:9b:ad:24:6c:d6:25:ab:a7:c8:a0:47:65:cc:37:4a:7e:
         33:e7:09:dc:fd:71:58:b5:f3:53:79:af:80:96:24:6e:1b:b2:
         a1:b9:27:1e:f4:3e:34:20:33:a2:e3:11:d3:0b:4b:87:29:69:
         81:e3:48:6e:0a:1b:cf:58:b6:46:fb:9a:fc:2a:1e:65:fd:1b:
         2a:21:dc:8e:12:38:f0:3c:6e:ca:ff:02:f4:0d:21:fc:89:99:
         6b:90:ff:f0:56:4a:29:4d:24:9c:16:c9:1d:9e:87:51:f9:1b:
         23:70:96:51:26:80:d8:9b:f8:a7:f1:9a:05:c1:02:3e:57:ea:
         29:a4:93:b2:ab:cd:08:3e:0b:6d:57:bf:a9:1a:e5:fa:3f:f4:
         4a:ce:a4:78:4c:fb:43:59:59:ae:4e:07:54:75:b5:c5:02:90:
         34:4a:ef:62:8a:d3:2c:6b:32:81:dc:86:d0:ec:cc:a4:8e:ed:
         6a:ab:9d:91:21:21:c3:2a:4e:e8:b3:ce:d0:4e:2c:b4:22:54:
         15:57:83:d8:27:4a:5b:cd:ad:66:7e:0b:c4:ea:57:c2:fc:74:
         a5:2c:7f:10:fc:8e:86:b4:5b:b6:07:68:ff:66:c4:c6:fd:be:
         b0:bd:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:57:04 2025 by rpki-client