Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/3795d32b-cb21-3329-8a84-96a859df4420.roa
File:                     3795d32b-cb21-3329-8a84-96a859df4420.roa (raw, json)
Hash identifier:          ZZ5UaXSEIMokay594dsCbExC7o008umPpvO1ZOaiIdk=
Subject key identifier:   BF:B0:9F:7C:E7:7F:76:86:2A:87:41:57:B3:8B:79:8D:5E:F4:CB:80
Certificate issuer:       /CN=d51efe24-e752-4f95-a889-f158e2563630
Certificate serial:       010D0C9F4328584A8FEEBE50C4F374D9A5389160
Authority key identifier: CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/3795d32b-cb21-3329-8a84-96a859df4420.roa
Signing time:             Fri 18 Jul 2025 19:02:24 +0000
ROA not before:           Fri 18 Jul 2025 19:02:24 +0000
ROA not after:            Thu 16 Oct 2025 19:02:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:ee:be:50:c4:f3:74:d9:a5:38:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51efe24-e752-4f95-a889-f158e2563630
        Validity
            Not Before: Jul 18 19:02:24 2025 GMT
            Not After : Oct 16 19:02:24 2025 GMT
        Subject: CN=1cfa55e3-a2f1-495b-abf0-dc053990a579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:22:68:fe:14:3e:35:38:ea:58:fc:ec:a7:
                    ce:b2:c5:2f:ec:85:cb:37:c9:94:2d:6e:e4:3e:ab:
                    6c:f4:cb:ac:37:b0:eb:07:a6:2b:c9:5a:9d:53:cb:
                    a4:a3:6f:57:63:bd:a1:6d:31:7f:34:7a:b0:9b:e2:
                    be:44:77:cf:81:0a:ab:6c:c9:90:44:6b:6b:d8:92:
                    ec:4d:01:66:ba:1f:3f:32:13:02:2a:63:b2:e9:99:
                    82:31:12:87:80:90:67:3c:34:41:f3:cd:1b:69:c8:
                    b3:48:c4:ad:68:bf:84:a7:d8:14:1a:19:6d:f3:a3:
                    17:fb:39:d4:4c:a6:fc:ca:d1:3e:c0:b6:49:13:8b:
                    91:90:44:dc:60:14:ab:4b:00:a1:b4:26:78:45:16:
                    54:c8:0f:b2:4b:80:c9:67:14:f0:d6:43:79:18:66:
                    41:37:5f:42:7b:13:6c:21:0c:62:4e:29:02:4d:e0:
                    38:0f:c3:9f:c5:d7:36:f1:a8:0b:42:ad:61:25:40:
                    c6:78:3a:99:4e:a1:ca:63:4c:7b:57:c8:73:f6:bb:
                    66:74:be:a9:27:07:dd:c0:65:15:bf:95:de:65:28:
                    c3:7d:54:1b:6b:09:bb:6f:b0:40:64:94:09:ba:45:
                    de:b2:11:1e:12:d4:1f:d6:16:81:26:db:c8:f7:65:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:9F:7C:E7:7F:76:86:2A:87:41:57:B3:8B:79:8D:5E:F4:CB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/3795d32b-cb21-3329-8a84-96a859df4420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630/d51efe24-e752-4f95-a889-f158e2563630.crl

            X509v3 Authority Key Identifier:
                keyid:CB:7B:23:3A:34:67:4D:2C:CC:6A:68:89:99:C0:87:D9:75:59:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d51efe24-e752-4f95-a889-f158e2563630.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:ca:07:41:61:1c:af:42:0c:74:28:a0:ec:db:d2:7e:1b:
         e5:6a:9d:97:66:ff:50:8d:82:56:b7:2a:6d:01:5d:1d:77:a3:
         ac:f0:67:68:f7:16:72:bd:54:d1:58:0d:04:33:66:a3:49:79:
         bd:af:1e:ae:2e:9f:41:fe:b2:19:70:50:42:cf:e0:d0:9d:7f:
         0b:c4:86:23:9c:f9:c2:34:6d:78:53:ed:19:a4:a0:e1:21:24:
         69:d7:02:34:2c:25:f6:fc:cb:0e:ab:23:95:d9:17:04:6f:1c:
         a3:34:77:21:16:e3:bb:25:e8:b0:25:33:fd:62:14:ce:13:99:
         32:eb:bd:22:50:0f:cd:42:b0:39:98:30:8d:60:4c:ed:42:83:
         04:66:24:ec:f9:5d:25:08:97:2a:14:34:a6:33:46:04:a2:3e:
         f6:c8:9a:f7:7d:7f:d3:52:e3:9d:e1:df:9d:9e:e7:3f:00:e9:
         32:3a:41:f7:00:89:e3:2d:8c:9a:26:9e:2b:a4:2a:2d:bc:ef:
         8e:c7:9b:ca:6a:76:e4:66:a8:2f:83:21:c6:fa:8a:3b:4f:c4:
         0d:06:28:93:b4:09:a7:5d:f4:0d:50:53:30:ac:de:18:6b:7f:
         ee:71:c4:f6:b1:09:1c:3a:5e:81:1e:6c:0d:fe:78:69:c3:96:
         cb:98:39:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:24:22 2025 by rpki-client