Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
File:                     ea3a997d-103b-3338-81e2-bcee3c92c06a.roa (raw, json)
Hash identifier:          JamRnfVYYdgcDgEp2GUdpy2BukwrwYbGEQCap3Q/4kE=
Subject key identifier:   BB:5C:5B:03:BE:FA:F8:14:93:19:A0:6F:A6:4A:5B:F3:2C:E5:68:36
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A0C0569ED1AF6A3BA7472B280
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        2602:80a:f004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:69:ed:1a:f6:a3:ba:74:72:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4b669d85-01a4-46f1-bd33-e2ee5a15c83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:6e:68:6a:4f:e9:45:e6:da:09:f4:75:1a:
                    53:94:67:08:c9:68:98:f6:56:08:02:7c:72:fd:c6:
                    dc:52:c4:85:81:09:3e:d7:79:97:0f:03:a7:8b:f9:
                    07:08:d8:e8:9c:82:33:eb:2b:ea:88:8b:b8:33:b2:
                    fc:25:d5:eb:e1:43:23:82:2c:ea:2a:46:1b:a4:5b:
                    09:c8:a0:25:7a:0b:a7:ef:25:65:e5:a4:6e:57:e5:
                    9d:ff:27:d2:19:a5:27:f5:d5:87:2e:14:97:40:b2:
                    ec:f8:25:14:d9:14:13:17:cb:a3:0c:4e:a8:7f:f4:
                    42:90:86:a8:eb:2e:4e:fb:9f:f9:92:68:cc:ee:2c:
                    7f:5f:ba:0e:bc:25:8d:50:fd:f1:47:d9:cf:97:1a:
                    99:91:78:bb:86:69:e7:c3:76:52:9d:e2:91:08:13:
                    28:11:c3:11:b9:0c:d1:e2:d7:f0:1b:91:63:52:ca:
                    92:ab:94:73:40:80:00:d2:a0:53:1f:98:18:d7:6f:
                    20:78:ee:c5:81:ba:68:74:ee:18:d0:24:bb:bb:b3:
                    52:ca:c8:19:cd:56:96:69:5b:08:9f:2f:38:4a:d6:
                    c7:11:73:c5:d2:9e:87:73:42:c8:95:7d:8e:46:1e:
                    81:59:c6:1d:0e:91:5c:23:f9:bc:2a:a7:4f:2d:d6:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5C:5B:03:BE:FA:F8:14:93:19:A0:6F:A6:4A:5B:F3:2C:E5:68:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:90:d6:e9:9b:3f:61:a9:38:9f:86:0e:9f:82:df:cb:91:69:
         13:2d:17:fc:6d:f4:1a:3a:2d:5a:c3:a3:7f:a9:bd:7b:d3:3f:
         dc:75:17:8c:b7:7d:f9:26:a4:53:c4:b3:31:78:b5:97:ec:2d:
         ec:3b:e7:e9:04:46:55:0c:22:ce:77:e6:ee:b7:ba:cb:0a:ae:
         02:ef:dc:fc:ee:51:31:9c:cc:15:34:53:29:0d:89:7e:af:d0:
         8c:7e:d0:e4:dd:f7:cb:0f:cb:3e:2c:9b:15:82:d3:d5:6a:5e:
         12:ae:f4:d3:92:79:05:e8:0b:3c:c5:9e:b5:31:69:9d:b5:74:
         9c:82:69:26:46:ff:e3:c9:9b:d8:41:c5:f5:6b:a4:68:2f:56:
         29:7f:a6:8d:34:41:2e:fc:9b:ce:11:a3:39:b2:68:bb:0a:4f:
         ba:4f:4d:de:f3:ba:44:6b:22:64:a5:82:3b:ad:f3:21:d0:4e:
         78:41:af:f5:22:f2:58:a9:d9:76:a0:42:11:d4:51:bc:aa:26:
         e2:f6:84:a8:45:4b:fa:47:4a:df:df:bd:3f:98:5e:c0:ed:cf:
         2a:90:93:b0:2e:6e:fa:de:04:85:d1:06:cf:9f:30:58:cf:a2:
         ab:89:81:2b:5f:3a:ab:ef:a8:78:32:8f:46:4f:84:e7:e8:b8:
         68:a7:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:32 2025 by rpki-client