Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/73ee0dda-9487-3664-8082-13b3c3ef23ab.roa
File:                     73ee0dda-9487-3664-8082-13b3c3ef23ab.roa (raw, json)
Hash identifier:          ++Vxr3j8RfvoDz5UZ2rfI+OZmztVsZx3SOnhtO3mj9w=
Subject key identifier:   25:3C:36:0C:F5:84:71:70:2C:71:81:F6:67:5B:02:25:B8:C7:22:85
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F4328584A225AC2939BC41A50557C3500
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/73ee0dda-9487-3664-8082-13b3c3ef23ab.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     30006
IP address blocks:        2602:f99a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c2:93:9b:c4:1a:50:55:7c:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=d973fc28-a734-4e4c-9bb9-a921bf0d4137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:c8:f3:4a:d9:42:fa:32:62:cd:55:41:fa:
                    27:2c:4f:c3:3d:76:54:2f:93:a4:81:6b:52:e8:e8:
                    14:17:ef:02:d2:fe:28:7a:a9:4d:c2:10:10:8d:4f:
                    f3:90:e3:a0:2f:04:7a:da:84:cd:bd:d7:eb:4f:82:
                    3e:82:83:95:f5:c6:b8:2b:57:be:68:82:37:61:86:
                    5a:b1:27:ab:38:fc:a7:09:59:be:36:46:89:21:cb:
                    6d:39:ff:42:00:0d:21:10:e1:a0:06:ef:e6:e6:e1:
                    b4:aa:c0:5b:f3:d9:5c:01:50:3c:7c:80:bf:a5:5e:
                    60:e0:a6:c2:2a:a8:c4:87:a5:61:19:d4:76:a6:25:
                    7e:9c:c1:5b:8d:07:97:20:f9:76:2c:c2:6c:cb:d3:
                    82:0b:f8:07:fa:1c:4e:08:db:57:a7:b4:88:de:8b:
                    15:fd:24:2a:28:e0:52:f4:50:4c:0f:e6:f9:6a:d0:
                    76:ce:92:c9:36:01:da:72:8d:df:64:23:da:b0:0e:
                    53:b7:db:9f:1c:f0:15:4b:7b:36:fd:d3:37:57:e0:
                    aa:8f:a2:c1:97:70:21:55:cb:b6:85:5a:2c:ba:ca:
                    ea:9a:84:b8:1e:b8:36:07:37:2b:8e:3f:8c:e9:85:
                    be:83:a9:e9:77:d0:e7:32:5e:b3:54:51:e0:c6:6e:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:36:0C:F5:84:71:70:2C:71:81:F6:67:5B:02:25:B8:C7:22:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/73ee0dda-9487-3664-8082-13b3c3ef23ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:8a:a2:2d:49:e9:a5:8d:14:bc:1d:48:1b:af:c4:77:c7:
         bc:05:91:ce:09:73:fe:03:13:de:7f:83:8e:d9:77:a1:30:63:
         be:70:d3:02:60:1a:ff:d6:0e:51:91:a3:f0:f2:b5:b0:ef:61:
         da:b8:f6:84:a8:7c:0c:5d:7f:76:ba:6c:f2:43:d6:04:c6:7a:
         ca:e9:3b:79:0d:4f:cf:e8:93:3f:e1:65:02:97:a3:30:8b:7c:
         61:87:ae:1b:13:89:d2:d2:ab:50:57:4d:60:a4:f2:14:70:60:
         65:52:b3:61:1a:df:01:5d:6c:2d:49:a3:6e:7a:54:f7:d4:fc:
         be:8f:10:6d:6a:1f:94:41:38:cc:56:1b:92:2f:82:4d:b6:cd:
         01:0e:0a:32:16:b5:65:d8:f6:43:a0:78:3a:fa:b0:65:8e:db:
         5e:6c:29:ec:95:59:28:08:64:05:f1:89:06:c7:28:50:98:87:
         85:2a:c2:7f:39:22:13:69:df:48:98:dd:5b:1f:9d:73:e7:95:
         10:71:94:e1:f8:f0:54:ee:b6:c9:a6:d9:37:de:c8:8a:1f:44:
         86:82:71:01:5a:8e:c2:77:0c:11:a8:f8:14:6d:70:6a:36:10:
         62:71:61:be:ad:b6:02:5f:3f:68:be:68:f6:60:6c:4b:2d:bb:
         91:4f:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:03 2025 by rpki-client