Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
File:                     22824fc2-5847-3567-bb08-05cbc0ef7a80.roa (raw, json)
Hash identifier:          FJIpzhhrG59v9QR6M7KgyGATF4rxXmLI/TawX0yO42k=
Subject key identifier:   59:C6:A5:E6:DE:06:AC:C2:37:7A:F1:3C:D5:6E:1C:BE:29:0B:38:0D
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584A23C0186FC1412DDBB8A3BE80
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:fa70:390::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:18:6f:c1:41:2d:db:b8:a3:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5040e1bb-56b1-45be-9174-4ef122ccd477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:51:99:60:5a:f7:60:76:97:46:ef:f2:b9:
                    97:d1:d1:14:b8:b6:cb:e7:6e:26:8d:16:69:00:de:
                    0b:40:92:c6:d0:4b:f3:54:b0:50:fe:8b:2d:b1:32:
                    f5:a5:8e:ba:7e:3f:06:da:b4:30:e7:35:94:7d:7c:
                    01:af:e3:3e:49:43:8d:1f:dc:16:43:4b:d9:a8:52:
                    50:8a:63:41:aa:80:e5:95:85:52:ca:3d:32:23:d5:
                    7a:87:94:e4:06:c3:91:56:d9:55:74:b7:ba:20:81:
                    3b:2b:e0:80:88:52:54:ca:5c:7c:13:b0:ab:a5:70:
                    ee:93:1c:66:c1:af:ea:b3:04:9a:3a:5a:03:32:4f:
                    ee:fb:e0:a2:63:97:a2:59:ad:98:f3:47:7a:26:32:
                    5b:00:da:27:43:1a:1c:d5:06:0d:d4:6f:69:c4:7d:
                    32:a5:42:7d:51:76:0c:f7:84:e3:f0:02:c7:7a:89:
                    97:fa:20:12:b1:1f:27:7d:d5:50:eb:9b:c2:3a:09:
                    0f:7d:05:a9:7a:4b:f8:b0:2c:39:7b:c2:03:da:ab:
                    18:8f:4d:02:0c:6a:40:06:32:40:8d:46:a0:98:08:
                    90:e5:46:d9:71:ca:34:6c:27:b6:28:db:c0:f3:51:
                    2b:ab:37:44:3d:3d:2c:8d:be:90:4e:ed:6b:73:40:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:A5:E6:DE:06:AC:C2:37:7A:F1:3C:D5:6E:1C:BE:29:0B:38:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/22824fc2-5847-3567-bb08-05cbc0ef7a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:59:c8:2b:01:ba:f6:0b:cc:71:64:1a:74:e3:19:80:df:
         45:3f:e0:52:4a:a2:81:ae:5e:11:f2:68:c2:93:a4:88:3c:5e:
         04:10:10:ef:66:1d:2f:86:6d:e0:ce:9c:e8:16:98:1d:f6:37:
         03:78:a9:60:f7:5b:14:91:18:48:f3:28:fb:92:6a:3f:5a:55:
         24:81:ab:28:c8:27:b0:a0:16:ec:c0:b8:20:c9:cc:c8:ed:8e:
         eb:a1:5e:43:f8:c0:de:0e:11:d1:58:7e:49:b6:f3:da:be:d9:
         e9:34:b3:75:db:e7:55:4a:8a:b9:71:9c:8f:3c:f7:37:82:ec:
         98:67:13:b5:59:0f:a1:e9:e9:f6:5e:e7:2e:db:c4:c7:dc:41:
         0b:65:9b:9a:ef:da:b6:08:ab:66:e9:0c:ad:52:26:38:8b:07:
         20:43:0e:32:6f:ab:ea:8e:a7:12:7f:89:be:43:ff:0d:da:b9:
         ac:b7:c6:64:a6:df:89:ca:e8:db:7c:c6:51:00:cc:36:30:bf:
         08:0e:2b:9c:83:fa:2b:69:cf:5a:9d:6a:60:d9:4a:26:5f:a1:
         55:b3:66:86:6f:4f:3d:11:82:b7:51:e3:c1:4f:cb:a1:07:f6:
         49:fb:df:2a:96:0a:83:ee:29:08:b8:f1:28:50:be:d1:df:bf:
         78:04:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:20:17 2025 by rpki-client