Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cdce4526-4ce8-35a0-a1aa-ceb2837359ce.roa
File:                     cdce4526-4ce8-35a0-a1aa-ceb2837359ce.roa (raw, json)
Hash identifier:          /AvjVHy7Gqzn4HgdStDQN4uee3QCpD0Z4DkASg36o3k=
Subject key identifier:   93:6B:0B:D2:BF:7C:3A:2B:E2:26:91:55:08:22:35:DD:37:4D:8F:52
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A2612E3C6186E1B6EC074EBC0
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cdce4526-4ce8-35a0-a1aa-ceb2837359ce.roa
Signing time:             Tue 10 Jun 2025 20:59:32 +0000
ROA not before:           Tue 10 Jun 2025 20:59:32 +0000
ROA not after:            Mon 08 Sep 2025 20:59:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:12:e3:c6:18:6e:1b:6e:c0:74:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun 10 20:59:32 2025 GMT
            Not After : Sep  8 20:59:32 2025 GMT
        Subject: CN=84dbe983-fa57-4a72-8664-8e3bfd6fd31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:59:34:42:06:87:d0:de:e2:f0:23:f6:2a:
                    06:c6:4f:ab:f6:19:9c:78:a7:c7:e5:53:4e:2d:20:
                    ac:dd:ba:b7:bd:4e:99:da:f6:9c:7d:ad:4c:16:1c:
                    23:8e:98:bb:21:4f:9f:f8:63:61:2f:02:ea:8c:97:
                    d2:3d:23:f3:d9:90:ac:12:b8:72:d7:41:e6:54:73:
                    2a:7a:da:13:39:7a:95:b6:8e:61:3b:0c:15:ca:83:
                    27:2d:34:c8:2f:da:38:2f:61:0b:57:01:90:48:ad:
                    30:e2:7f:c0:47:30:0e:93:35:4d:2b:1d:82:44:b9:
                    c1:bb:a1:c3:4d:3d:76:30:36:22:e9:68:0c:17:1e:
                    d2:28:5d:44:d0:21:df:e2:10:22:95:10:ff:bf:af:
                    30:be:96:d2:cd:31:7d:4a:dc:aa:ca:6e:1a:66:48:
                    62:a0:2f:a2:4c:67:9c:be:46:c8:ec:a8:81:d5:f7:
                    28:62:0c:13:a3:5e:92:b5:fc:4c:10:6c:77:6c:5c:
                    8d:56:fb:8f:6f:50:43:20:cd:91:fc:04:d6:8b:fc:
                    57:63:50:a2:73:e5:56:dc:bc:f8:81:23:16:d1:8a:
                    da:e1:40:de:1f:8f:0c:c7:d4:aa:bb:ae:db:2b:90:
                    2f:fa:43:32:c5:69:54:7c:66:52:bf:13:ed:cd:5c:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:0B:D2:BF:7C:3A:2B:E2:26:91:55:08:22:35:DD:37:4D:8F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cdce4526-4ce8-35a0-a1aa-ceb2837359ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:79:d4:57:5f:76:52:ac:d4:30:15:fe:a9:2d:8f:f7:2a:cc:
         77:af:1c:91:01:30:59:ef:66:5a:54:f0:7b:24:27:a4:d8:fb:
         0e:14:55:07:97:b0:1e:e3:64:c3:6a:c1:32:bf:8b:d2:da:fb:
         aa:4b:bc:8a:80:2b:c1:e5:b0:b8:66:55:06:a2:6b:a9:90:14:
         fa:d2:78:d4:02:25:8a:61:3a:51:e1:e4:a8:48:89:b6:17:f8:
         ed:0b:4f:43:90:71:11:fa:4e:46:ea:0e:94:98:92:f2:99:1f:
         b8:b2:7d:6a:07:d9:f9:81:4c:bb:6c:e4:04:32:00:3e:38:b3:
         89:10:26:d7:e0:da:e0:e9:dc:b5:c4:67:21:ac:03:4a:dd:c0:
         61:06:50:c9:2c:a2:87:00:2a:82:ce:72:4a:fa:d7:d7:e8:be:
         50:c9:fc:4e:86:9c:f3:e7:cb:0d:76:17:2e:84:14:2a:c3:c1:
         f1:48:bc:59:70:09:a3:c0:86:62:4a:c2:10:3b:d9:9f:cf:e9:
         81:aa:47:10:b7:e4:2d:a1:4b:9c:d7:9c:92:69:25:2a:20:fe:
         bf:86:7e:af:4e:7f:06:2b:c9:f9:60:e9:ef:d6:43:5f:40:0f:
         8c:06:f2:2c:3c:b0:26:7e:fa:ee:c4:3c:1f:c4:28:ba:43:18:
         0f:af:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:49 2025 by rpki-client