Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa
File:                     be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (raw, json)
Hash identifier:          oLn1UDrMqqEoUFpgL/W0M3cDYG8upJ0Ye0pc7XUFkIs=
Subject key identifier:   E7:92:EF:FF:88:D1:6C:97:D3:B5:1F:B7:F4:15:92:12:A4:DE:6B:4B
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F4328584A23C00A66B515329EE8BF0540
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     400679
IP address blocks:        2602:fb82::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0a:66:b5:15:32:9e:e8:bf:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=33f59a44-664b-44df-a778-1783cb13d187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:77:77:5b:44:68:3a:da:07:7c:f6:68:ef:
                    70:c3:dc:82:0b:13:9c:9f:db:39:40:bc:f9:5c:66:
                    28:e8:54:e2:28:3d:1a:a0:19:82:a8:9f:dd:34:8d:
                    ba:70:65:27:95:73:60:33:4a:19:ca:eb:26:c0:01:
                    31:6d:97:d7:6b:b2:5d:fe:a0:79:56:4f:6e:dd:6e:
                    08:0b:05:da:3f:e1:6f:f1:71:8c:d1:81:70:9b:66:
                    ef:40:a9:07:79:90:4b:55:b0:32:85:d7:db:b3:06:
                    d4:96:79:8e:2c:10:74:cd:74:df:ca:06:19:ce:bf:
                    03:07:2a:a4:bf:a6:f3:52:60:41:52:a9:c8:61:b5:
                    46:cf:0a:a8:3e:ca:3a:df:e1:31:6a:11:41:2c:6e:
                    f8:7f:ab:67:5c:21:2f:22:dd:ec:43:be:94:de:f8:
                    dd:a1:be:84:fd:e8:56:0c:28:96:1b:45:a8:99:52:
                    99:84:00:2d:90:84:dc:a6:c0:52:65:87:26:b7:36:
                    bc:8a:87:19:87:13:df:8d:28:03:6f:41:94:fd:3e:
                    40:af:7f:88:66:25:88:c5:27:06:33:0e:2c:3b:93:
                    82:98:c6:1a:11:a5:6e:61:02:df:00:cc:3a:98:7d:
                    c0:7e:32:e9:80:b0:b3:d5:40:7d:5b:07:9f:45:b0:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:92:EF:FF:88:D1:6C:97:D3:B5:1F:B7:F4:15:92:12:A4:DE:6B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:44:c7:9f:b3:14:e0:09:78:33:e0:df:95:e6:0a:62:23:
         d8:e0:db:8d:56:2c:3f:ae:0c:38:10:4e:a3:b6:35:72:6e:b6:
         6b:70:1c:cc:9a:8c:16:77:76:5a:26:5c:70:98:a1:a9:27:08:
         41:59:05:30:5c:0f:ab:58:51:c0:29:05:78:fc:43:ff:57:7f:
         a1:d4:14:ba:35:61:8f:31:a4:68:a7:05:ff:4d:a1:a9:cc:68:
         cc:99:df:30:ae:19:ee:5f:5c:ba:cf:d7:af:fe:91:c7:e2:3b:
         f0:2e:ac:f7:9a:32:41:f1:83:d1:1f:ea:b0:36:14:c1:54:2e:
         d3:fa:ee:30:44:e4:e3:ec:47:44:0f:f1:32:9e:66:0d:df:8f:
         f4:1d:8c:5b:87:2c:1f:7a:ca:d6:37:19:1d:4e:c7:28:5e:71:
         0b:89:79:ad:db:bd:bd:b7:09:89:59:3e:e8:71:60:5a:94:df:
         8a:89:53:d2:35:e1:a5:0e:2f:cf:e9:17:38:2c:36:91:7c:4d:
         27:3d:27:f4:f8:4c:db:da:4d:06:d3:e4:7f:1c:a7:33:1b:fc:
         77:6c:01:71:30:42:3e:3b:9f:10:ea:37:14:f2:4c:a0:0f:fa:
         b5:d2:2f:6f:12:88:db:2b:19:20:87:91:ad:5d:a9:2c:40:bc:
         01:13:bd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:32:28 2025 by rpki-client