Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa
File:                     e6589685-287e-39e0-a7eb-0aa709e301c6.roa (raw, json)
Hash identifier:          8IsJO1PNq80WKWj54Pv1uNvdcJiT1xy3FLKLmukcp/g=
Subject key identifier:   03:50:6F:83:DB:A6:1B:2E:28:3A:C5:87:D2:D4:CE:CD:7B:4E:E4:77
Certificate issuer:       /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
Certificate serial:       010D0C9F43285849F44A5C1E516FBCCB9F78D500
Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     21790
IP address blocks:        2602:81a:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5c:1e:51:6f:bc:cb:9f:78:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=5a048430-d307-4be0-a257-7e878bd1eca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:82:d4:1d:d7:d7:80:30:8e:c5:57:06:7d:37:
                    14:40:b7:27:13:b2:4d:e9:c6:5e:07:ba:b8:fc:81:
                    e0:32:be:b8:c5:08:e7:8b:cc:8d:a3:41:aa:56:d1:
                    cf:9f:4b:3f:c1:45:73:5f:8c:79:e9:00:14:2a:1b:
                    2c:1b:e8:37:3a:4c:6a:40:5d:6b:42:5d:44:c4:f3:
                    be:2f:26:7f:d4:75:86:65:50:d9:92:2d:22:e2:c1:
                    92:6f:c1:05:84:87:23:a8:2a:bb:c3:94:46:d1:d2:
                    66:b6:c8:d1:74:54:93:33:34:33:ba:9a:2f:82:3b:
                    a8:15:d4:a0:9e:b3:ab:f8:07:29:57:1b:23:87:fe:
                    38:11:10:10:43:3d:61:fc:1b:61:40:a3:45:93:44:
                    21:de:3b:4a:ac:26:a0:12:f1:86:7b:e6:0e:3d:b6:
                    2b:7c:2e:15:66:0a:bf:88:16:f6:0b:5a:e6:ef:e7:
                    1f:d0:43:b4:00:ce:e0:9b:ae:78:d9:83:30:94:ca:
                    60:f9:2f:3a:ef:36:c9:4e:65:3b:93:5e:ef:02:ac:
                    40:f4:6b:0a:71:29:ca:73:d4:d0:2d:d6:c0:03:57:
                    0d:95:55:41:f6:fc:ff:0e:f8:ef:75:a9:11:ae:2b:
                    50:86:e5:d2:d9:bc:d0:0c:59:a0:ea:9d:75:26:12:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:50:6F:83:DB:A6:1B:2E:28:3A:C5:87:D2:D4:CE:CD:7B:4E:E4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:eb:f1:84:8e:14:8f:19:c8:df:c1:aa:8e:a0:5b:34:99:
         29:cd:53:88:3c:aa:6d:4c:86:21:b5:de:80:8f:65:3b:65:f3:
         a3:70:b6:10:0b:ef:13:8e:61:0f:10:2c:51:31:64:96:1d:d5:
         62:b1:49:66:12:17:cb:ce:a2:04:b2:17:0f:05:4c:b2:05:24:
         cc:9b:83:db:9f:a9:1c:87:9e:71:05:e1:2c:a4:ca:ce:6d:67:
         56:06:81:0c:f1:ed:60:84:f3:b0:a7:d1:db:47:7e:e8:6d:4d:
         a4:28:bd:95:0b:e7:d4:1a:90:a4:09:1b:31:74:d2:d5:64:96:
         b5:33:fd:67:b2:6d:14:a5:3d:83:85:21:0b:28:0e:a7:f2:20:
         64:cf:48:1f:6b:81:51:31:15:44:9d:e1:8f:81:90:fd:56:1a:
         37:64:3c:69:ad:0c:13:37:09:dc:38:f0:6c:1e:61:19:02:f8:
         1f:b7:d9:8d:10:a8:52:e1:33:1f:2f:e7:78:42:f3:7c:f4:f8:
         72:29:9f:50:6f:e0:67:8f:64:e1:bc:23:34:41:f2:70:79:f9:
         3b:da:f8:8e:fe:5b:a6:8e:85:59:a6:df:01:cc:4d:e2:1a:61:
         fc:dd:e6:98:af:bd:64:11:b6:b0:b8:3d:1a:9f:5d:1d:b1:e3:
         01:5f:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:47 2025 by rpki-client