Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa
File:                     5d08b6cd-616d-3cda-affb-3753d328830d.roa (raw, json)
Hash identifier:          Wwx1spB4Ak9MdOQU5mQb/Vq1qd2yJfWQexoaL8owj2k=
Subject key identifier:   73:E7:48:36:C8:0B:C4:55:CE:65:69:AB:F2:E0:90:58:19:53:84:CD
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F4328584A47338C0EE3074FBD6CD93180
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa
Signing time:             Sun 22 Jun 2025 17:47:01 +0000
ROA not before:           Sun 22 Jun 2025 17:47:01 +0000
ROA not after:            Sat 20 Sep 2025 17:47:01 +0000
asID:                     14874
IP address blocks:        2602:f836::/40 maxlen: 124
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:47:33:8c:0e:e3:07:4f:bd:6c:d9:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Jun 22 17:47:01 2025 GMT
            Not After : Sep 20 17:47:01 2025 GMT
        Subject: CN=1cc3025f-87bf-4b08-8425-e129385a0c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:6a:15:16:07:75:0b:0c:a3:78:d5:f5:e8:
                    97:52:eb:16:72:1a:af:2b:8a:17:38:59:39:e8:a6:
                    76:89:f2:84:81:f2:33:7a:d1:82:1a:69:dd:28:34:
                    fd:2a:ac:83:07:ec:b7:4a:10:16:a7:1e:e4:de:53:
                    c3:22:30:49:08:58:91:f2:ec:54:05:f2:62:e6:00:
                    51:82:6e:c3:32:66:13:49:f2:43:8c:fb:ed:84:47:
                    47:a6:3a:6a:7e:53:30:5f:0f:b1:f9:45:da:2d:49:
                    8a:69:81:43:83:81:a8:12:3d:b8:37:2c:ba:d2:f8:
                    57:a5:58:22:52:b2:91:9d:7d:22:26:57:5f:57:3b:
                    87:5f:57:b1:38:45:d0:2c:f2:06:7e:ab:c6:89:df:
                    80:d7:ef:a2:73:0b:3b:29:29:e4:4c:7a:ff:57:9a:
                    cb:b2:ac:0b:36:91:b4:ae:48:d7:ac:1b:5d:9e:f4:
                    ec:91:b9:5e:7c:07:b3:4d:cf:53:a3:f4:6b:bd:0c:
                    f9:25:36:e8:b7:1e:88:1a:af:07:b2:25:3e:7d:ec:
                    86:d2:9e:bc:89:d8:1c:25:50:e6:9c:ea:5a:7a:f7:
                    b7:cf:3f:ca:f2:87:2d:f0:ce:d5:43:82:af:fc:ba:
                    2a:57:8a:78:61:b0:39:7c:01:0e:f5:17:19:a5:dd:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:48:36:C8:0B:C4:55:CE:65:69:AB:F2:E0:90:58:19:53:84:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f836::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:13:c8:6d:f6:1e:cb:59:e0:2a:45:90:43:05:6b:89:bc:0b:
         12:2a:d0:dd:42:06:fb:6d:6b:99:01:33:9a:be:7b:c8:18:c6:
         49:86:61:33:46:cc:ac:c5:92:8e:a2:8a:e1:9b:12:41:09:66:
         d5:cf:93:2c:d9:42:e9:25:cf:dd:98:9c:e7:c0:88:21:65:44:
         6f:32:fc:fa:d9:d9:17:60:8a:50:37:dd:e9:8b:8f:70:06:a0:
         3a:f2:90:5e:86:2a:9a:3e:cb:04:4f:c6:f2:73:7d:78:12:4a:
         a7:99:f6:83:54:5a:90:70:77:a1:8e:41:ec:b7:4e:91:af:6b:
         79:81:61:b7:9a:f9:76:10:ee:fc:c6:3b:b0:10:be:47:a8:a0:
         39:20:ed:d4:d6:5b:12:c1:7d:3c:c1:ec:94:34:71:c2:5c:c9:
         7c:90:95:f7:e4:c6:e1:be:28:0f:6a:08:3f:68:5e:85:87:97:
         75:84:d8:b1:a0:0d:72:8d:51:62:2e:a2:55:fc:4b:82:54:91:
         4f:74:9b:38:e2:8a:2c:95:43:db:95:79:ef:f5:6b:eb:db:0e:
         26:4c:ad:b8:4d:59:59:1c:2a:47:13:78:5e:00:fe:b2:0d:e5:
         dd:e0:b2:2f:0d:de:2b:59:d7:0c:e0:2a:40:6a:83:8c:b4:8a:
         3f:6f:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 11:15:08 2025 by rpki-client