Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fa881f24-a5f9-31a8-bef8-b316941f5f40.roa
File:                     fa881f24-a5f9-31a8-bef8-b316941f5f40.roa (raw, json)
Hash identifier:          oStpPdoo4Ch63ZD8RkleXlxvY+rY1skxyfPr11gHBqQ=
Subject key identifier:   9A:CB:21:A6:75:52:71:02:78:34:CC:58:9F:78:A3:F2:67:EE:26:CA
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F4328584A363FEBB5F690B6D44B669E80
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fa881f24-a5f9-31a8-bef8-b316941f5f40.roa
Signing time:             Mon 16 Jun 2025 16:03:12 +0000
ROA not before:           Mon 16 Jun 2025 16:03:12 +0000
ROA not after:            Sun 14 Sep 2025 16:03:12 +0000
asID:                     10952
IP address blocks:        2610:28:3020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:eb:b5:f6:90:b6:d4:4b:66:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Jun 16 16:03:12 2025 GMT
            Not After : Sep 14 16:03:12 2025 GMT
        Subject: CN=ce0d2bb7-01e7-40b5-b274-eba1622717c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:02:73:61:fe:4e:61:bf:66:6d:65:f6:42:
                    5c:09:82:c3:70:fe:3a:99:72:0d:98:1e:59:d7:c3:
                    f4:b0:1e:71:12:c9:3e:c6:3c:34:8f:34:23:91:7b:
                    a7:8b:eb:57:67:c4:69:46:83:6e:b1:89:9e:87:0b:
                    bb:12:eb:22:ef:1f:82:b3:54:d1:5d:56:51:88:d1:
                    f3:e5:a7:ea:05:86:72:c6:53:38:6c:9a:d3:37:b9:
                    b1:bc:7f:74:7d:12:26:5c:a8:7f:45:93:34:39:71:
                    ed:da:70:0f:f3:6a:15:13:34:ef:6a:1c:ad:f7:a7:
                    56:a7:a8:96:89:18:a1:79:de:96:f6:a1:28:5c:6e:
                    bd:95:9b:1c:5e:0d:fe:6b:36:2b:11:c2:cb:ff:7b:
                    e6:50:0c:00:58:bc:53:c8:71:6b:6d:1d:00:2e:cc:
                    59:c2:b0:ea:68:61:ef:cf:6b:3f:73:31:fb:ac:91:
                    f4:64:12:58:98:d1:41:db:f8:99:38:64:d8:5c:17:
                    92:25:31:41:b0:70:22:f2:62:e4:b0:54:d7:be:24:
                    af:a1:99:18:96:1f:ec:c4:34:c3:35:0c:79:c6:ab:
                    50:41:02:89:5e:89:14:1b:b3:d9:43:83:d9:36:b9:
                    6a:f8:7c:74:a4:b7:69:23:ff:8a:e7:d4:eb:f9:c2:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:21:A6:75:52:71:02:78:34:CC:58:9F:78:A3:F2:67:EE:26:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fa881f24-a5f9-31a8-bef8-b316941f5f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:28:3020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:38:0b:b7:e1:b6:f6:99:e6:de:df:f9:84:03:3b:ce:79:
         71:fb:17:41:83:a0:47:00:a0:5f:12:da:a7:e4:a7:2e:80:cb:
         88:61:ea:04:2d:c0:78:b6:09:d6:48:f7:42:d0:d9:7b:78:76:
         f8:db:c9:28:3b:45:62:d9:56:68:45:1e:e6:89:74:7a:be:6b:
         39:77:f4:3d:92:88:95:59:ae:27:9d:6a:28:fb:d4:d9:09:b8:
         03:40:3c:a7:30:3d:cc:05:9a:3e:4b:f4:d9:86:28:38:82:1a:
         a4:af:c9:0c:8d:18:90:79:07:ac:d7:fa:72:65:cf:ec:ea:32:
         0a:4f:df:6d:e6:28:0d:d3:2e:7b:6d:3e:f7:b0:04:77:cf:14:
         00:59:79:bc:f3:04:cb:3e:8c:0a:12:37:44:e1:6d:14:57:74:
         d2:ed:6a:6a:a7:17:6f:88:b2:c0:53:ff:65:f9:00:c3:7b:e4:
         d4:e5:6e:31:2b:41:b3:0e:b2:cc:c6:e9:4c:cc:9f:70:45:65:
         59:bd:bb:40:0c:ad:64:9c:3f:0e:aa:30:32:3a:83:55:d1:3c:
         a4:7a:75:97:81:61:cf:5c:50:2d:23:c1:50:85:77:02:a1:9f:
         00:39:34:0a:86:9e:95:17:6d:42:16:a8:c4:56:0b:c7:0c:50:
         b6:52:fc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:42:44 2025 by rpki-client