Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
File:                     abb857cf-60e4-323e-bd82-a61588882d93.roa (raw, json)
Hash identifier:          Ee53RoZDgDyJDmQFj/OLp9jRaGCfmNoA5lF4RneeKa0=
Subject key identifier:   87:AF:FD:BA:30:59:2C:42:8C:EB:AD:88:12:A0:FD:A5:F9:FB:05:C1
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584A119AB61827184706254D1080
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     23459
IP address blocks:        2602:f90f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b6:18:27:18:47:06:25:4d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=a5a5f54d-2864-447e-9831-0fbe2e3dbddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:97:cc:75:b6:82:64:86:49:5f:87:a7:16:
                    ea:3e:55:e2:3a:1f:b6:6c:f8:d5:2f:83:f1:31:4f:
                    b1:d1:1b:b7:14:76:99:73:26:25:0f:24:cc:3a:f0:
                    32:9e:19:00:6e:e8:59:d5:b9:75:8e:a4:d7:67:3c:
                    7c:b7:c6:f1:2a:9e:bd:66:06:99:78:a0:9c:74:77:
                    67:e6:f2:03:7d:f6:20:59:7b:97:c6:bb:2d:9a:5b:
                    a8:1d:fc:b4:5f:c9:d3:2d:e6:71:9a:27:65:34:1f:
                    97:d8:d7:a5:66:66:0e:f4:12:82:5b:01:b2:82:6e:
                    88:48:a3:fa:d7:10:82:d6:24:48:37:12:58:47:22:
                    25:2f:dc:97:e7:71:f3:13:e4:63:b7:cf:c7:cf:9c:
                    77:7b:93:38:9d:5b:4e:fd:75:96:66:86:86:35:63:
                    2e:e4:1e:1b:27:14:1f:98:45:e2:70:4e:4f:26:2f:
                    68:3c:c2:fc:00:82:54:59:eb:e4:c3:ba:43:03:b3:
                    7f:92:01:1c:2f:a7:13:d7:22:97:97:36:12:98:f6:
                    fa:ac:17:66:08:ae:8d:e3:f5:90:20:c2:0d:4b:ff:
                    65:a0:11:4f:f8:84:a9:e8:c3:41:4f:20:40:fc:ae:
                    55:98:50:37:b3:c1:cf:48:1c:2c:37:e0:12:84:f4:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:FD:BA:30:59:2C:42:8C:EB:AD:88:12:A0:FD:A5:F9:FB:05:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:51:32:28:ee:84:16:fa:ca:c9:19:6b:40:24:bd:be:e8:16:
         2f:18:05:40:f6:0d:fa:1f:ca:9f:2d:2a:dd:5e:f9:aa:5a:4e:
         86:16:8d:06:08:00:4c:5f:13:5c:06:96:3b:f4:93:1f:f3:d2:
         8f:01:27:96:53:d3:1c:34:1b:ad:fa:a2:96:a9:c0:20:b7:18:
         43:a1:cf:07:8e:51:fe:74:bf:41:97:20:a2:70:b4:b3:95:1c:
         46:1c:cc:aa:ac:b4:53:c8:10:77:74:9e:36:16:6f:6f:2a:9b:
         10:f9:8d:0e:14:d7:b3:ad:cb:f5:ca:e4:9a:58:9d:21:0d:87:
         10:2e:46:16:f7:9f:ae:b4:c0:a8:6b:fb:ce:25:38:30:3c:b6:
         b2:d0:d9:eb:76:6c:c6:ae:74:03:d0:3b:74:42:09:aa:f3:98:
         ec:0f:43:f2:6a:24:46:1c:c8:fe:03:d9:f2:29:60:6f:b4:e7:
         ab:55:38:d7:7d:3f:d7:74:00:33:2a:dc:30:21:14:d2:c7:fd:
         91:be:23:e8:9c:c8:37:eb:e1:a1:bc:03:99:50:63:92:26:fb:
         1d:55:64:f7:7e:68:69:a2:ad:b6:84:04:3c:c9:9e:9d:5e:68:
         39:80:ca:e5:db:39:1a:00:e6:06:08:d6:e9:07:e4:79:55:23:
         fe:9d:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:45 2025 by rpki-client