Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
File:                     a0ed00a4-2dcb-32ed-a058-569efce134bb.roa (raw, json)
Hash identifier:          l7sLsmbOUxMFuP2JNhwy1x3O7O/QlvzoYa8LdPFVyHg=
Subject key identifier:   7C:7A:F4:FE:29:BC:6E:96:F5:53:CA:9E:0B:22:DB:8D:C2:66:EF:85
Certificate issuer:       /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial:       010D0C9F4328584A23C00C9969419136F473A140
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     62900
IP address blocks:        2602:2d5:f0::/48 maxlen: 48
                          2602:2d5:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0c:99:69:41:91:36:f4:73:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=5381dcfa-ad69-4199-9fcb-60f31889f891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:ac:ba:83:bc:4e:fc:1f:f2:cc:b3:2f:46:
                    29:17:16:a5:cd:64:ae:fd:09:d1:a5:a8:ef:96:ed:
                    08:6f:82:da:c0:a7:6f:d1:3c:7d:11:e5:17:11:db:
                    eb:eb:93:b5:d0:55:07:75:37:86:ae:e9:f7:16:84:
                    ee:ae:43:39:03:e4:dd:36:0b:4b:d2:d8:c7:39:a5:
                    57:d7:05:35:ba:fc:46:1c:7f:55:62:ef:40:bb:5d:
                    b2:a5:d6:85:73:49:56:7d:2b:bc:93:93:b5:e0:ca:
                    dc:4e:90:78:f7:a6:35:d7:23:15:6d:79:7b:99:d0:
                    ec:d8:c5:b8:12:35:31:75:ac:58:66:98:99:eb:2d:
                    43:f1:8e:76:6c:e2:3c:93:67:9e:f9:84:b5:4d:3c:
                    c2:5a:e5:56:6b:49:e2:bd:35:60:77:25:e5:da:a7:
                    3c:00:93:f4:0d:0e:7f:13:19:3f:8c:a9:f2:8a:2c:
                    db:00:5b:03:36:86:d5:f3:06:44:b9:16:fb:34:44:
                    11:e5:10:a0:94:be:4f:12:6a:cd:1a:4e:33:a8:f0:
                    2f:bc:2d:78:4d:26:30:79:7b:01:eb:db:5d:5c:2f:
                    b1:84:8f:48:24:d2:b7:a9:a4:f4:08:75:53:3d:4e:
                    d2:e8:b6:32:39:d8:4d:57:49:1c:37:15:e0:73:b7:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:F4:FE:29:BC:6E:96:F5:53:CA:9E:0B:22:DB:8D:C2:66:EF:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d5:f0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:53:5b:58:6f:4f:4c:71:e2:c2:99:6e:bf:57:0c:10:1f:
         18:d4:9c:d2:e1:ac:0a:ae:cc:c0:d5:68:54:fb:a6:cb:22:02:
         89:5d:d4:d8:e9:79:74:3c:3d:d3:90:ef:63:6e:95:b0:7f:c9:
         6b:3d:e8:85:21:20:c3:cb:61:9e:79:60:a2:a2:a2:1a:0a:c0:
         30:8a:e3:0f:fb:84:fa:dc:31:9f:ba:99:a7:d0:bb:3b:ee:26:
         48:d9:85:a6:bb:e4:7a:93:75:43:48:b4:03:a7:54:34:7a:95:
         fe:18:02:d4:b8:05:12:ae:7d:15:89:c7:4d:b1:ee:44:58:cf:
         09:64:c2:98:14:43:63:90:bd:98:60:3b:89:ea:77:9a:39:1f:
         b2:bd:b0:d4:73:97:ba:45:f7:a2:76:11:54:6c:c2:43:b2:ba:
         c6:4a:9d:02:b7:18:e0:61:02:4b:3f:95:34:91:9b:67:0c:47:
         e6:9f:17:24:b5:d6:cf:81:6f:1f:08:3f:12:a8:cc:05:19:3b:
         47:8b:46:1f:aa:06:77:48:71:54:7d:c6:73:11:e9:b9:b0:07:
         4a:0a:84:c6:59:63:4e:33:fe:40:60:83:35:c8:75:c0:ee:40:
         c3:74:0c:c1:12:36:7f:8b:70:a7:af:ca:c5:db:40:d0:3f:ba:
         94:29:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:15 2025 by rpki-client