Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa
File:                     a4843b74-884d-3404-9816-c1d40d9ed480.roa (raw, json)
Hash identifier:          qy4dXd/Ocvh1JJ3wV52cUm4LwfTxFukYAEpdW/FU61g=
Subject key identifier:   22:78:8E:A3:C0:30:0E:67:C4:18:0F:A9:4A:CF:94:39:6D:C1:6D:9C
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584A225ABDD31E0FA9E646D1A1C0
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     398020
IP address blocks:        2602:fde8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:bd:d3:1e:0f:a9:e6:46:d1:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=9b204988-80e5-4caf-98a6-706b92afd203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:c9:50:a0:81:00:46:6d:39:f7:f8:05:a7:
                    2a:90:94:b2:f2:85:c0:a2:4e:f6:45:e6:d3:f3:9a:
                    51:98:3c:bb:bf:f3:52:fe:a2:4b:f8:d6:c4:c7:e4:
                    a9:ae:23:90:1a:24:9c:6e:c0:41:4b:2b:f3:b7:ca:
                    96:18:28:a3:ba:7d:8b:50:4e:5c:90:42:df:3f:bc:
                    0c:e5:03:e0:72:a0:40:fe:ad:c3:34:52:a1:30:49:
                    f3:2d:f1:f9:3b:4d:da:84:ad:e5:fd:3c:cc:ef:d0:
                    09:16:d0:b0:0c:3f:c4:d6:8f:27:ac:66:38:57:93:
                    41:dc:e5:57:f7:75:bf:ef:bb:85:07:f3:dd:c0:86:
                    6e:db:8e:88:e4:0e:52:71:11:c6:31:f8:bd:85:26:
                    1d:b4:b0:af:7b:1a:c2:b2:7b:01:5d:11:9f:37:cc:
                    0a:d8:4c:a3:84:19:e7:94:a9:f5:20:c5:19:f1:7f:
                    0b:0b:71:ac:0c:98:4e:bf:e8:b3:f2:2b:53:bc:f2:
                    ea:61:85:05:61:80:8d:d3:de:4f:20:1f:79:85:d8:
                    c1:42:b5:cc:3d:89:b6:81:84:cf:1f:e9:6e:c0:8d:
                    65:6d:1b:e4:86:1b:5e:f6:f4:82:d6:25:f3:0c:71:
                    f5:7a:75:b8:3b:7e:50:c2:18:6b:cf:5d:c4:04:6c:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:8E:A3:C0:30:0E:67:C4:18:0F:A9:4A:CF:94:39:6D:C1:6D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fde8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:7e:58:89:5b:60:22:1f:22:fc:17:27:1a:b8:45:f3:05:
         dd:de:96:72:5c:9c:4d:ee:c0:08:d4:5a:de:79:ce:b6:1e:08:
         05:0a:09:ab:ee:03:8a:df:1a:d0:09:04:6e:79:40:9d:d8:63:
         58:31:17:88:5a:d9:1f:5f:fa:aa:08:f2:18:f5:19:f3:76:8d:
         3a:d0:af:66:2b:03:d3:7c:07:1e:f9:cf:5b:74:dc:72:e1:6c:
         18:b6:6d:fb:aa:d9:93:ec:bc:6c:86:10:00:0b:e6:6c:4e:6e:
         09:09:d0:7f:61:6f:6a:98:e9:9e:fc:17:b0:10:ec:d1:96:f8:
         53:54:c3:93:5f:96:76:28:14:97:c3:4c:d3:52:a9:f0:c9:29:
         15:cd:56:40:d1:93:d0:84:4d:fa:c5:f8:44:f3:58:8d:34:31:
         d9:33:67:ed:f7:a0:f9:7b:5e:46:7b:59:5a:62:23:06:07:ec:
         a5:a8:29:8b:18:95:0c:8e:f3:28:05:7e:c9:dc:d7:b8:d8:d0:
         2a:62:15:f7:0c:ef:79:9a:4f:60:9f:c4:42:1a:89:37:c5:33:
         83:0e:ac:35:21:bc:79:fe:9b:7e:b8:f8:4f:45:5f:63:79:83:
         61:95:f5:c4:bd:3e:d5:b8:ae:aa:95:87:bb:9d:b6:d3:5a:45:
         43:4d:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:36 2025 by rpki-client