Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
File:                     b5688e20-5a18-31ad-8912-33c14a17342f.roa (raw, json)
Hash identifier:          DfkcpENt2pGzrfn3UoG49N2pex/L2yfHrTaqQiII1Mw=
Subject key identifier:   4D:C0:49:80:5E:BD:C9:BA:F1:13:92:75:4A:E2:DD:32:42:79:5B:D7
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F4328584A23C01A7E26C03213C328FE80
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:f86e:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1a:7e:26:c0:32:13:c3:28:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=25e18665-0830-47f8-bce8-38c4381485b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:60:82:18:1e:9e:79:ff:b3:dc:9b:31:9a:
                    71:5d:85:17:cc:49:da:6d:6f:24:3f:e2:44:2d:b0:
                    d6:37:ea:93:48:38:af:b9:1a:ff:5b:9e:57:18:dc:
                    ad:14:6e:38:0a:59:0d:07:59:cd:36:25:70:f4:2b:
                    ec:c5:85:74:4a:5a:2b:2c:f3:e5:c8:10:17:f6:4b:
                    78:94:c7:1d:82:60:14:d6:1c:66:e9:01:7a:e5:83:
                    eb:f6:aa:cb:2a:0e:36:a8:62:00:37:3b:54:55:c7:
                    0f:67:dd:45:8f:39:70:69:52:1e:5b:3f:6b:23:ef:
                    23:99:b4:3a:bd:a4:98:9b:6a:26:57:12:f1:9e:3b:
                    0c:35:99:56:51:f5:b5:e5:6b:f2:06:71:cb:b4:95:
                    b4:2e:46:bf:74:59:7a:10:84:26:c5:f3:0d:78:c9:
                    76:d4:1d:ba:09:57:53:58:a7:ef:f7:c4:26:4f:83:
                    6c:7f:76:ec:7d:52:c8:8e:4b:ec:aa:68:09:77:c0:
                    e4:9b:21:ca:08:64:46:b3:02:64:9c:67:c1:b4:27:
                    e3:ed:33:81:78:80:1d:d1:1b:5c:88:a3:34:a8:f3:
                    36:0a:48:12:25:02:bc:fa:ab:45:da:47:4f:d8:1e:
                    dd:5e:5c:d1:4c:ec:d9:69:b3:f6:b6:5e:b1:c7:98:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:49:80:5E:BD:C9:BA:F1:13:92:75:4A:E2:DD:32:42:79:5B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86e:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:27:c7:8b:d9:fd:8d:ff:d0:c5:96:f0:86:2d:f0:6e:8f:0f:
         4f:52:3d:17:0f:f7:dc:b3:4a:f9:5d:ab:41:c4:11:f2:a2:c2:
         d8:94:62:98:59:b5:50:f4:44:88:81:1a:c9:a6:e5:59:5b:35:
         c4:81:f8:4d:e3:cf:d7:1d:b5:b1:fc:b3:cf:a6:e0:98:35:df:
         8c:84:f8:7d:5e:21:ad:37:2c:39:36:56:00:c9:78:05:cd:92:
         b6:9e:fb:bf:8e:e2:4d:3a:fc:61:7d:ce:14:3d:e4:e1:9e:ee:
         13:b7:ca:2d:6c:f2:7f:fc:92:47:8f:c3:5c:4b:f9:1a:e6:08:
         30:ee:d7:9d:6b:15:cf:46:21:cc:c8:f1:4a:97:00:ea:ce:b6:
         e0:bd:a1:1b:bb:4e:59:be:3e:77:1e:c2:8b:20:f0:83:d0:a7:
         d6:3b:c0:9e:ca:72:67:71:21:d5:2a:d7:32:f3:63:dc:5b:ff:
         e2:fc:43:c3:87:66:89:08:1b:3e:a8:d3:21:a9:a5:f0:9e:eb:
         cc:18:ae:d8:2b:a0:06:f7:aa:d2:00:88:25:02:57:7e:fa:08:
         70:ca:d6:03:42:5c:5d:d0:57:22:7e:a3:1a:07:9a:79:b4:b4:
         86:45:25:f9:ae:9c:0e:b2:f8:2e:d7:2d:b1:01:2e:45:79:87:
         e7:dc:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:53:04 2025 by rpki-client