Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/e998dd85-5690-3915-9981-773e6a1874bb.roa
File:                     e998dd85-5690-3915-9981-773e6a1874bb.roa (raw, json)
Hash identifier:          3dO91yfNwrGN+ol13pseNuj0BV+KmdvOsSsmbR+OtKo=
Subject key identifier:   A9:B8:AB:CF:B5:DC:60:92:45:64:0F:7E:E0:C2:05:EA:E4:1D:1D:0F
Certificate issuer:       /CN=1045948a-6e89-46b9-82ff-13c039b622e6
Certificate serial:       010D0C9F4328584A1465744AD76A72A167B696A0
Authority key identifier: 6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/e998dd85-5690-3915-9981-773e6a1874bb.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     11263
IP address blocks:        2602:2ed:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:74:4a:d7:6a:72:a1:67:b6:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045948a-6e89-46b9-82ff-13c039b622e6
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=e2180277-4325-4258-a307-59fa2891ea1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:99:a4:55:13:9a:b6:7d:f5:bd:55:60:e5:
                    45:23:40:df:14:bb:96:39:3e:ec:5f:7f:1b:7b:a5:
                    60:e9:32:62:da:2b:6d:32:f1:0c:96:51:3f:45:a7:
                    9d:d5:94:6a:99:03:0f:50:24:5b:70:58:b9:7b:90:
                    d1:ce:58:20:6f:6b:da:63:db:70:91:ac:0d:d9:22:
                    1b:e5:80:cc:22:c0:f0:25:11:2d:9d:80:a5:79:e6:
                    35:02:6a:43:ee:a8:70:9c:30:47:04:dc:27:b1:f3:
                    e8:6e:3a:10:14:bf:bc:d7:cc:ce:db:07:67:80:ae:
                    87:32:98:a1:29:55:ba:84:2c:47:66:3a:be:f1:48:
                    e3:27:73:25:f7:df:bd:25:3d:ff:0f:8a:a0:5e:d1:
                    87:9d:1a:63:c1:b4:70:f5:3b:f6:48:06:1f:68:c4:
                    89:c9:a7:c6:ca:0a:f7:ac:a7:a1:3f:a8:1d:7e:31:
                    20:3d:79:89:3c:ac:7f:88:30:79:8e:2b:75:ef:c7:
                    aa:5d:cd:da:50:cd:75:73:4c:af:38:02:37:33:81:
                    78:59:21:b1:00:43:6c:c1:13:c5:6c:c4:d1:55:4a:
                    19:14:85:9f:06:de:fe:51:c9:af:87:1e:d4:cd:87:
                    ab:a9:3b:64:f4:ce:db:0b:8e:a3:bf:4d:42:e6:77:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:AB:CF:B5:DC:60:92:45:64:0F:7E:E0:C2:05:EA:E4:1D:1D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/e998dd85-5690-3915-9981-773e6a1874bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl

            X509v3 Authority Key Identifier:
                keyid:6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ed:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:97:e6:46:4b:74:9b:ac:88:4f:51:c7:47:69:3f:28:cc:
         6b:0b:c5:f5:7e:c3:33:8b:b9:ca:a1:c4:c7:fb:7b:d8:68:72:
         68:2f:03:52:92:41:db:80:46:af:10:81:c2:d6:cc:a4:d7:02:
         16:40:a4:f8:48:54:a0:d6:4e:e8:95:e7:c0:26:06:fe:ea:b4:
         f2:53:73:16:02:6a:e0:77:95:62:db:ef:d6:81:53:17:75:77:
         64:c6:e3:a3:28:05:ec:94:1c:33:47:60:3e:df:92:e1:69:d2:
         a3:50:e0:2f:94:47:3c:57:51:36:d9:f3:a4:8e:67:0e:2d:eb:
         95:06:89:23:60:1a:44:df:24:f2:a8:51:f5:6c:85:a2:e9:7e:
         51:8e:76:3e:fe:7e:59:f6:b0:23:55:a0:c4:c9:29:d7:37:16:
         84:e7:a9:af:7b:9c:a6:f3:d4:bd:cd:18:14:67:50:8b:45:ac:
         f3:ff:01:c3:a7:2e:23:05:9d:38:e1:f3:6b:d0:e5:b0:30:69:
         a7:a3:88:7b:32:0c:df:e6:b2:27:8e:80:61:b9:a4:f4:32:95:
         ab:93:d5:f8:57:71:61:70:66:68:45:39:04:fa:c5:50:ab:35:
         95:7c:ca:a2:50:3f:69:78:1a:ab:90:f7:2a:ff:0c:8f:8f:2f:
         aa:74:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:54 2025 by rpki-client