Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/b69300ca-7737-3576-9de1-845bdd16a373.roa
File:                     b69300ca-7737-3576-9de1-845bdd16a373.roa (raw, json)
Hash identifier:          QSPUksEB1hyvnOTZ24/a7tpx/oZ6hjf/S7gJb2sYjYM=
Subject key identifier:   8D:BC:30:09:F1:90:D7:A4:0D:47:9F:AC:4B:87:6F:8A:38:5B:1B:29
Certificate issuer:       /CN=7311d09f-0e08-4761-abfa-23bbd03484c6
Certificate serial:       010D0C9F4328584A68260BCACF100C661E7D6D80
Authority key identifier: 3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/b69300ca-7737-3576-9de1-845bdd16a373.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     6939
IP address blocks:        2602:ff0c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0b:ca:cf:10:0c:66:1e:7d:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7311d09f-0e08-4761-abfa-23bbd03484c6
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=2b1b2e55-502c-427b-8170-3bbf5199e0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:c0:39:2c:4d:21:e4:20:17:5f:0d:45:34:
                    c0:9e:06:98:0c:f1:3e:29:cf:76:94:ab:d9:fa:5b:
                    72:80:e7:93:3c:2f:5a:7d:a2:b9:db:22:88:9d:7f:
                    17:fa:f2:51:5b:17:5e:c2:9b:6a:a2:c4:a5:73:55:
                    c4:71:53:2e:6d:78:06:81:9d:39:05:08:f2:db:03:
                    56:d0:22:c1:bd:06:89:a6:16:e8:12:25:4a:9c:5c:
                    49:72:86:b5:88:10:38:02:25:16:6d:f9:58:9f:29:
                    43:e9:ae:7c:49:6e:0e:9b:17:14:2a:ba:fd:13:5d:
                    d0:fd:80:31:ff:3b:60:55:26:6c:65:97:cf:e3:10:
                    ee:4e:fb:b7:9f:45:e8:29:b2:56:49:45:40:b7:56:
                    86:0d:55:e4:ef:67:b6:92:71:1a:8e:4c:57:44:98:
                    7a:2b:14:ae:ad:44:44:73:cf:66:ed:2d:4f:8a:45:
                    6e:03:38:26:53:ac:98:f8:25:bd:d6:a3:4e:fc:36:
                    33:d9:79:43:24:0e:25:8b:14:5c:78:9b:fc:7a:ff:
                    71:aa:5e:30:b8:bf:54:a7:a0:54:d4:1d:97:f2:5f:
                    12:76:99:f5:f8:8e:b9:32:45:57:49:d6:fe:12:aa:
                    51:0e:ac:e5:d9:b5:6f:d4:e8:61:20:dc:74:68:f9:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BC:30:09:F1:90:D7:A4:0D:47:9F:AC:4B:87:6F:8A:38:5B:1B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/b69300ca-7737-3576-9de1-845bdd16a373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e8:78:bc:39:f5:93:92:d4:2a:dc:d2:f4:54:87:7c:13:75:
         4b:9d:2c:6f:23:3a:1f:81:ea:fe:71:9d:2e:04:7e:02:05:99:
         b4:d3:ae:fe:88:02:e9:87:55:2d:03:58:80:68:81:39:57:6f:
         f9:8c:84:e9:84:14:aa:63:ef:a7:9e:d8:ff:00:3e:a5:7c:68:
         7e:b6:50:58:ab:f0:0e:5b:db:32:ae:b8:ba:7b:c3:99:14:52:
         5d:ed:50:e5:2b:7e:f4:6a:5b:bb:a1:36:39:02:bd:55:5b:b8:
         73:a6:e1:50:b6:e9:20:52:b0:6b:2a:ba:4e:c2:d3:cc:ab:a0:
         60:94:59:01:2a:77:d2:19:31:3d:08:ec:cb:f8:ef:cb:ab:7d:
         72:2e:80:8a:be:f3:d7:c4:49:2b:7e:f1:fc:23:2e:3b:1a:8e:
         8b:31:14:01:60:84:c6:38:df:fa:92:cd:a3:3a:2f:67:a6:e6:
         bd:3e:a8:8f:c7:82:29:41:8c:6f:32:31:86:64:47:42:1b:6b:
         54:bf:e4:74:db:ba:80:99:8d:a5:96:4c:77:22:37:2a:44:af:
         90:66:75:13:67:f3:12:0a:43:2b:b4:16:a1:38:e5:aa:94:06:
         81:ec:80:88:6c:7d:03:d9:eb:dd:45:29:a8:04:43:7f:74:8d:
         4f:e0:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:32 2025 by rpki-client