Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa
File:                     413904da-6901-3e61-86ae-c596ab591334.roa (raw, json)
Hash identifier:          Fg0lqNsFJKAOaTd4qIjcIgZ39dMROqmSevs/DogIZac=
Subject key identifier:   10:F1:4F:66:B6:7E:34:51:45:D5:46:3E:63:30:3A:C7:9D:E4:88:8B
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584A1E2AA979FB92D0B3291AB570
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     401399
IP address blocks:        2602:fbcf:e0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a9:79:fb:92:d0:b3:29:1a:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=9f1efb66-de57-4ab0-929c-3a53d09aab80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:d4:f3:70:52:c4:bb:f5:41:25:87:e7:be:
                    10:a9:56:12:ea:8e:9d:69:47:f4:89:c7:1e:1a:31:
                    b3:ab:81:f3:1d:06:5b:9c:b3:17:7c:22:d8:cf:5e:
                    fb:ae:6e:71:0a:a8:73:c5:a7:8a:e1:9a:a3:8d:4d:
                    22:b6:d2:29:4c:c0:8d:c0:45:fa:50:e7:c5:7a:ed:
                    66:10:ca:26:5b:4d:bf:8b:d7:fb:15:9e:b2:d5:4a:
                    1a:f4:f2:6d:93:a0:e0:7d:85:12:3a:36:f8:f1:c7:
                    f9:46:52:ff:e8:db:ad:88:5e:a4:ad:fd:d9:d8:ad:
                    98:23:ab:22:9e:35:f2:1b:b1:06:eb:ac:69:e1:27:
                    0a:fc:6b:4e:e0:62:b0:9e:e2:26:61:70:bd:66:58:
                    7d:25:6a:1a:95:17:ce:22:9a:ec:36:1f:3b:68:a3:
                    97:48:67:2c:bb:b1:93:84:b6:76:ca:48:5b:02:53:
                    85:ef:1b:9d:49:87:a4:2c:9c:f2:31:60:ef:1c:ed:
                    f3:7c:a6:7a:8a:44:e4:95:c7:20:ab:2b:eb:62:3d:
                    8e:17:af:cc:4f:5c:df:1c:86:35:91:91:0a:79:37:
                    81:4c:d1:a6:f6:99:42:ef:01:82:25:52:74:f7:82:
                    69:d3:82:2f:02:ba:f5:ea:59:64:cd:d8:8f:6e:66:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F1:4F:66:B6:7E:34:51:45:D5:46:3E:63:30:3A:C7:9D:E4:88:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:c4:c6:b4:77:1b:77:e0:7e:b8:e4:40:27:2c:6b:e0:2e:
         f4:c4:41:02:15:7b:c5:d0:79:d7:b2:b9:48:66:45:1b:b0:40:
         ba:e2:49:ae:27:0b:97:07:98:95:97:6f:19:1f:b4:2f:07:48:
         2b:36:71:8f:3d:c4:a1:48:1a:d6:27:fe:8d:71:8a:56:1b:dd:
         18:27:1e:67:70:51:98:38:5d:9a:d2:62:1c:5f:cb:84:d8:db:
         ff:c3:10:61:c9:73:cf:41:16:bb:68:dd:c3:07:25:b4:e0:48:
         f7:54:ca:8d:b0:a3:5a:55:ea:1f:1a:2a:a6:3e:d1:3a:b9:d9:
         c5:91:c6:dc:78:54:76:8c:99:7c:18:10:0c:38:45:fa:25:74:
         3e:57:d6:f5:a2:69:36:9b:6c:44:3d:f0:2d:be:75:e5:0b:af:
         12:f7:62:9b:70:da:22:dc:68:a1:12:50:3b:ea:d2:33:36:d3:
         a4:6c:0c:9b:70:91:2e:6f:0b:35:8e:d6:da:12:93:82:aa:5d:
         d1:db:16:a0:f6:7a:7a:d9:5a:e4:af:12:12:f9:4c:8f:dd:1d:
         07:9c:a2:b4:49:0c:88:4c:f0:9d:23:5a:96:54:97:0f:d5:3d:
         59:d4:34:1c:da:3c:a7:74:9a:25:49:b3:19:b1:53:07:95:51:
         58:ba:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:08 2025 by rpki-client