Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa
File:                     63557a11-1132-331f-b85a-320f32aec529.roa (raw, json)
Hash identifier:          gH0GKy6VSNJgmWwdMHj9pbt9KAYwQR5u8lK3219bLDk=
Subject key identifier:   07:1A:83:73:03:23:AB:E7:14:CC:45:F0:54:1B:0A:57:84:A5:48:37
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F4328584A2E907535CCE8BAAF39E6DB50
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     397720
IP address blocks:        2602:fdc2:200::/44 maxlen: 44
                          2602:fdc2:300::/44 maxlen: 44
                          2602:fdc2:700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:90:75:35:cc:e8:ba:af:39:e6:db:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=96325d2e-f063-4e6a-ac72-46ef7233b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:01:00:bd:23:be:21:fd:bd:b7:95:55:3a:
                    af:75:34:eb:03:80:b3:97:9c:f1:01:97:0a:c6:24:
                    c4:fa:5b:96:db:e5:ba:b9:c2:67:e0:17:0d:46:9f:
                    22:67:3f:ed:0a:21:89:45:93:fb:4b:0e:aa:84:54:
                    8a:94:df:23:3b:96:ac:46:99:26:d0:5d:91:87:71:
                    7b:8c:d2:19:5b:10:33:d6:8c:9d:a7:09:b7:94:fa:
                    0a:7c:b6:3d:24:f9:ab:e9:2f:61:65:76:5f:2f:e4:
                    79:c9:95:45:26:96:71:da:40:67:cf:0b:5a:17:0f:
                    5d:96:c6:ba:53:d3:c8:c3:a7:03:fa:6e:66:30:04:
                    7e:c1:e0:9f:b2:0a:d3:74:ee:7b:45:db:43:fc:45:
                    1c:6c:de:65:34:d7:26:ea:23:67:9a:3f:94:7c:c8:
                    1c:da:87:5c:b9:28:1e:62:a6:8a:96:de:08:03:8a:
                    35:67:58:e7:ac:7c:51:d8:de:33:84:4a:d5:f1:57:
                    da:a7:a7:f6:dd:fa:99:f5:0d:0e:73:38:e4:4f:87:
                    c3:78:cb:2b:90:c1:9c:f6:43:bf:7d:dc:1e:fb:b9:
                    3f:4a:bd:0c:da:f4:b0:e7:55:07:72:6b:fc:2a:e4:
                    b9:57:07:fa:84:24:dd:09:ad:e7:29:b8:49:33:a5:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1A:83:73:03:23:AB:E7:14:CC:45:F0:54:1B:0A:57:84:A5:48:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdc2:200::/44
                  2602:fdc2:300::/44
                  2602:fdc2:700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:98:9c:6e:06:81:8c:ac:88:82:6a:92:77:09:21:6d:3c:
         87:09:61:85:13:32:f4:68:e6:85:c3:30:ca:c2:be:32:a1:a7:
         b1:f4:d3:d8:32:01:ef:a4:69:d5:2f:fb:a2:1d:3f:0d:24:f9:
         48:d1:06:06:df:25:47:30:ea:47:40:7b:74:0c:0b:c5:ac:6c:
         67:b9:c7:65:d0:ef:79:94:c2:c6:cd:c4:2c:7b:a9:2b:d5:2c:
         2f:b2:27:88:31:eb:78:a2:1f:90:9a:27:99:c9:ec:6d:4b:c7:
         6c:19:13:8b:10:87:33:dc:c2:1e:1f:77:c7:19:2d:91:e3:a7:
         8e:e1:08:76:dc:c8:2f:59:85:30:fa:ab:78:b5:c7:91:9a:3f:
         fb:46:87:cd:ed:be:49:d5:8d:6f:ec:b3:fc:b1:ec:c0:8e:05:
         39:b3:68:e7:ce:11:c0:78:05:fa:f5:49:03:74:22:9b:a2:31:
         80:67:ac:7d:58:c6:78:b1:82:06:b3:86:ba:0e:95:b5:3d:1b:
         a6:e1:a0:b6:11:73:f3:aa:16:52:b0:35:29:40:cd:93:81:30:
         d0:9f:c2:f9:ed:c0:0e:92:e4:7d:2d:20:ac:8e:45:b7:f9:6b:
         99:dd:d5:60:b6:11:e3:c4:19:49:c8:45:5d:71:43:4b:73:31:
         6d:3c:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:35 2025 by rpki-client