Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/44c50ac8-adf6-31ec-865e-7103a6acc3bd.roa
File:                     44c50ac8-adf6-31ec-865e-7103a6acc3bd.roa (raw, json)
Hash identifier:          WPH6c7R3EVUWryBpPO9fe46BGyEbUgVK2VjW/4HqluU=
Subject key identifier:   D8:98:92:8C:89:9D:0E:07:EC:43:E9:60:D1:8B:74:69:F3:0E:22:CD
Certificate issuer:       /CN=2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3
Certificate serial:       010D0C9F4328584A30EAF68B0546A2A5D6122B80
Authority key identifier: FB:6C:67:DB:A8:A9:11:52:6C:6E:56:3A:D9:CD:2E:84:29:0B:84:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/44c50ac8-adf6-31ec-865e-7103a6acc3bd.roa
Signing time:             Wed 11 Jun 2025 15:51:14 +0000
ROA not before:           Wed 11 Jun 2025 15:51:14 +0000
ROA not after:            Tue 09 Sep 2025 15:51:14 +0000
asID:                     401767
IP address blocks:        2602:f61a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:ea:f6:8b:05:46:a2:a5:d6:12:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3
        Validity
            Not Before: Jun 11 15:51:14 2025 GMT
            Not After : Sep  9 15:51:14 2025 GMT
        Subject: CN=1fbbac6b-b453-455c-84a8-cb1a9e5d818f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:90:f2:52:d4:43:43:d4:ca:d9:16:01:7b:
                    15:03:ad:bc:ec:49:66:42:4b:0d:3f:e1:53:9c:06:
                    e1:36:d8:5c:ac:91:75:20:65:50:ca:7e:fb:15:30:
                    e6:a0:98:b4:a5:71:eb:c3:56:96:19:c0:23:75:db:
                    97:6f:9a:a7:4c:21:f8:b5:e7:04:cc:88:12:fd:e3:
                    1f:07:a1:ac:28:f6:ed:7d:6f:87:f3:16:5c:c5:a4:
                    e6:dc:32:e5:e5:95:0b:be:2f:32:1b:bc:97:eb:b0:
                    7f:a6:ea:5d:fd:30:83:18:6e:21:1b:d9:84:18:5e:
                    b9:f7:65:32:1d:e2:a2:3e:01:7b:fa:58:05:20:a7:
                    85:59:ad:1b:00:c5:38:65:dd:f3:8d:2a:51:a4:74:
                    73:5c:8c:14:f9:f0:02:9d:5d:8d:af:bf:e2:ed:65:
                    76:fa:43:ac:0d:f0:00:3b:8d:c8:3f:41:cf:6d:9c:
                    79:3e:13:98:7f:2e:c0:28:fb:b9:50:49:f1:ac:b9:
                    43:3c:e2:d3:9a:e9:6e:5f:f8:03:c2:73:84:83:c2:
                    eb:63:6d:61:02:11:de:19:78:0a:ed:62:57:af:44:
                    18:02:24:3d:60:b7:12:0b:57:3c:b5:cf:fb:8a:7a:
                    3a:6f:de:f9:eb:06:3d:cf:22:fa:48:a2:63:01:6c:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:98:92:8C:89:9D:0E:07:EC:43:E9:60:D1:8B:74:69:F3:0E:22:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/44c50ac8-adf6-31ec-865e-7103a6acc3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.crl

            X509v3 Authority Key Identifier:
                keyid:FB:6C:67:DB:A8:A9:11:52:6C:6E:56:3A:D9:CD:2E:84:29:0B:84:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b7aa7c2-beaa-4d6e-bee6-9b51915ec9b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:80:9b:ed:23:81:4d:90:a5:19:72:9c:d2:c7:14:3f:46:11:
         0a:a8:e4:63:77:b4:e3:b0:84:65:ff:9c:47:cc:3e:fb:0a:5c:
         b5:0a:8d:46:b8:a6:2a:9c:ba:74:2e:15:91:8a:13:0f:2d:f4:
         26:83:a4:c4:12:ae:47:7b:d3:27:50:86:6b:e6:ae:23:aa:c1:
         47:26:0c:18:66:c9:3f:a7:ac:13:a9:23:08:f7:05:c3:09:fe:
         16:8d:9b:ee:dc:44:96:c0:69:a4:25:a9:8d:e9:b7:28:62:c8:
         1c:24:cf:db:b6:87:d9:a2:d1:a7:f2:5e:52:65:6d:50:fa:0b:
         37:00:3c:30:01:a6:71:a3:43:cd:51:88:b6:cb:99:df:8a:e0:
         36:25:ec:28:6f:4a:07:d9:74:c7:26:a3:2f:2e:51:be:d6:93:
         4a:67:6c:c3:d4:d1:e9:16:e2:3d:8d:a7:bc:23:43:f9:f3:08:
         2c:63:21:07:90:17:e8:04:9a:dc:ab:0b:3c:4e:7d:3a:d9:fc:
         de:b7:2b:aa:7b:e7:73:62:c8:3e:38:fe:9b:be:78:03:68:07:
         f1:da:93:2e:41:0d:4f:a8:c4:c6:0e:31:b8:3c:ab:17:74:ba:
         5c:85:7f:f9:16:f6:a0:70:70:70:db:1e:5a:ff:4d:70:e2:9f:
         e7:52:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:17 2025 by rpki-client