Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
File:                     1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa (raw, json)
Hash identifier:          f2PbAg05bPGSXWSIkgREp8wYXAPL0XtsMlj+Cdw6BZM=
Subject key identifier:   43:28:08:BA:B2:3F:55:08:BE:CC:D0:3C:5C:DD:03:10:BD:BA:21:36
Certificate issuer:       /CN=d9914204-e089-4759-b838-5325dc4683dd
Certificate serial:       010D0C9F4328584A66C077B69C793F006ED1EB80
Authority key identifier: 3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     54686
IP address blocks:        2602:f9b8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:77:b6:9c:79:3f:00:6e:d1:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9914204-e089-4759-b838-5325dc4683dd
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=f7589d05-b23f-4b0c-a774-1c4a98fa7bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:f8:64:80:52:90:57:08:4b:24:7d:49:3e:
                    f2:ff:b4:44:5c:d2:3d:73:ec:90:6d:3e:38:aa:05:
                    88:4f:92:b5:1d:2a:f6:a3:3f:66:a5:f9:ed:f5:bd:
                    e0:56:3c:12:0e:1f:64:bc:ca:2d:06:a6:17:60:d0:
                    7a:94:c0:66:e2:18:87:4b:68:09:e2:1c:ba:05:68:
                    2e:23:34:58:9b:6c:af:52:7b:36:3f:e2:a0:0e:31:
                    40:08:34:86:c6:c5:c3:d5:a3:a7:c0:6f:a1:2a:d1:
                    77:f3:54:0c:18:06:c2:6e:d2:d0:df:62:02:35:6c:
                    f6:d8:fb:f5:90:20:5c:24:55:41:07:33:26:bf:d9:
                    f6:a6:e2:ea:dd:87:51:f6:45:41:03:6a:99:64:c8:
                    80:ec:c4:b0:2f:de:02:3e:44:e9:c3:9d:bc:ab:9a:
                    cc:56:29:bf:53:da:ff:5f:f8:49:ac:88:c6:30:bf:
                    ea:da:00:c0:fe:59:27:d6:83:1f:01:92:b6:74:16:
                    c2:9f:8e:c7:24:7a:1f:c6:31:55:ea:77:82:c6:3e:
                    dc:ea:45:a1:d7:12:6e:25:7d:e3:2b:07:e4:eb:2c:
                    14:45:03:93:2e:77:c9:55:14:2f:8b:1c:f1:95:d0:
                    33:8d:20:67:b6:50:38:9e:d6:df:51:7f:fe:f7:c5:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:08:BA:B2:3F:55:08:BE:CC:D0:3C:5C:DD:03:10:BD:BA:21:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:76:c3:a8:d7:ad:0a:ab:2f:cb:51:87:af:85:1c:dc:42:
         ec:47:1d:54:86:34:4c:ae:4b:d1:6a:d3:0b:d9:71:56:15:9f:
         98:f9:20:bc:39:17:3d:e3:a5:f9:c0:f4:ad:45:ff:40:dd:f1:
         da:da:08:25:86:6d:3b:77:d5:22:4f:0d:41:8e:ce:b4:86:a6:
         2d:91:8f:c2:06:c7:f4:d6:10:68:8c:e3:6c:07:a1:3a:45:9a:
         f3:c5:33:67:d5:a1:74:2c:86:aa:b7:03:a3:32:25:af:46:3f:
         b0:ed:fc:3f:9f:af:6d:af:f2:48:77:87:25:45:e9:5b:f5:45:
         36:2b:23:76:76:57:da:5d:15:78:0e:4b:aa:ca:6e:14:6c:e6:
         71:c8:c6:c8:db:02:57:75:01:ee:31:f3:9f:8d:cf:95:de:2b:
         d5:4a:cb:5f:ae:7b:2d:2c:11:62:eb:cd:6c:82:58:10:99:56:
         c0:e3:0e:b0:ea:4e:ca:5c:12:e0:ab:de:d7:3a:63:c8:50:ef:
         a0:4f:d0:c6:7c:3b:4b:44:59:d2:5f:fc:f2:06:39:a5:f1:af:
         b1:02:b2:40:a5:47:ac:36:63:6a:2c:5b:d7:35:20:cb:cd:ec:
         52:40:b8:16:dc:92:4c:3c:c8:c2:cf:24:57:7e:50:5e:a9:ec:
         d8:85:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:52 2025 by rpki-client