Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
File:                     15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json)
Hash identifier:          nhCNjjPtJBJ9JUgDUTT+5zsysvYqFwZ8nl9n+7BKrn0=
Subject key identifier:   D8:6F:FA:4E:97:CB:84:93:42:D8:CB:B5:2B:18:65:97:6F:D4:FA:60
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F4328584A331AF34948C201D306B97118
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     13849
IP address blocks:        2602:fbb5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f3:49:48:c2:01:d3:06:b9:71:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=ab983c86-1147-4529-a7cd-d8d7ae136223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:b5:aa:3b:d9:28:8e:24:11:8f:40:c1:0c:
                    bc:d7:ec:51:4f:e8:28:a5:e1:fc:b9:18:dc:5a:9d:
                    59:b2:ae:ba:a3:96:8c:5e:f7:44:ad:c2:d0:3b:68:
                    ba:d9:5d:b4:db:c5:32:34:49:9c:85:05:11:0d:72:
                    ce:f4:ef:9e:37:69:23:a9:f5:fc:83:cd:9f:b2:0b:
                    ef:6d:e7:b2:c3:42:27:cb:cb:53:da:c0:34:df:06:
                    a4:80:27:c4:4a:7b:58:f6:27:8f:4b:ef:38:11:3b:
                    e6:52:0d:89:8a:51:63:43:38:d8:1b:e2:2d:94:02:
                    85:d2:17:23:73:9b:91:6f:a4:18:36:ff:17:5b:17:
                    13:8d:53:c5:09:f2:0c:9d:49:d6:6c:1d:92:64:9b:
                    a6:ab:cb:f2:37:27:42:7f:f0:cc:2a:9a:cd:f1:1b:
                    60:d6:e5:94:3f:a9:e5:99:aa:d4:0e:c7:47:31:90:
                    43:63:42:4c:13:82:3f:68:43:7a:d1:80:6f:ea:cb:
                    5a:56:22:b8:df:72:a9:53:1c:37:7f:1a:ce:2a:bc:
                    4a:01:1b:3a:d0:77:a9:36:83:d3:3b:7b:20:fa:26:
                    48:64:90:60:36:a0:e1:08:5c:20:7e:59:78:05:76:
                    ff:0e:4c:29:ba:9b:2b:2c:86:56:2d:8f:c2:b0:fc:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6F:FA:4E:97:CB:84:93:42:D8:CB:B5:2B:18:65:97:6F:D4:FA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:37:62:14:0f:5e:fe:e4:99:a4:e3:3a:c4:4d:1f:2c:66:
         ad:ff:73:a5:39:14:df:9c:1f:67:eb:2a:82:76:33:bd:83:9b:
         ec:0d:fd:98:5f:00:4e:34:bf:22:64:a7:d5:93:74:62:0c:39:
         13:76:76:ee:c8:48:64:e4:a8:fa:24:43:ea:e0:9f:91:eb:71:
         4a:e7:4e:36:f0:10:36:11:4a:40:9a:60:dc:f6:9a:07:7a:6a:
         81:40:7e:af:8e:0d:e7:8a:89:3a:98:d6:f7:b0:0f:30:ce:78:
         36:38:2f:28:76:6f:9c:f8:47:ed:ec:b2:2d:08:03:9c:6f:52:
         47:9d:30:cb:3b:f3:e3:67:0b:37:eb:2e:b8:9a:3c:6e:e7:d7:
         d6:07:5b:d6:d3:3a:48:50:09:10:a8:db:19:24:03:45:25:85:
         30:13:2d:30:51:36:49:5e:db:b1:81:99:51:c0:60:4b:60:31:
         27:f2:44:10:54:d7:01:6a:59:a0:fd:64:ba:4e:16:14:f9:66:
         42:3e:f8:03:65:5a:d0:af:c9:66:87:43:33:42:49:ca:4e:58:
         e4:ac:42:6f:15:48:4a:2d:dd:3e:32:d2:1c:d1:6a:25:a4:21:
         af:73:4f:8a:7a:fa:eb:69:e2:85:a7:64:10:db:1b:5b:bb:42:
         87:16:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:12:01 2025 by rpki-client