Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
File:                     34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json)
Hash identifier:          zunL1KuPVDqQBSke2B0kkMRAhYzani6c0IjPY9+X3Oo=
Subject key identifier:   3A:DB:A4:F8:33:64:0E:77:F0:07:02:4B:91:B2:B3:E8:69:BC:6C:D8
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849F71525618107F7EBFBF2FB80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        2602:fdaa:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:25:61:81:07:f7:eb:fb:f2:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=c03a1fd2-0c6f-4e27-9b18-5da31fc8d668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:fc:4d:d7:e4:c0:26:d6:9b:e4:d6:32:21:
                    fe:7b:6a:5f:c6:96:c6:6c:39:75:ce:e3:f0:8d:f9:
                    b9:80:b9:de:b7:f4:44:43:ec:0d:dd:5f:99:c8:6f:
                    83:ce:06:6e:c2:82:a8:ed:00:e0:29:db:a3:1a:f4:
                    12:c6:b8:90:4c:56:ec:b4:90:9c:1b:23:49:d2:0e:
                    81:b0:43:61:3b:7f:d9:b7:e8:85:1d:af:f1:25:62:
                    b1:ea:4c:1b:1b:4b:4b:18:01:df:9a:2a:38:36:ae:
                    18:07:eb:3f:34:d0:8d:e8:21:5e:81:05:dd:f3:5e:
                    bb:c6:5a:c7:67:df:4c:7c:a0:b5:bb:51:c0:a4:65:
                    5f:5d:01:5a:47:20:4f:dd:f3:e9:38:9b:07:f7:2d:
                    eb:16:68:c8:c8:e6:45:b8:18:d9:b9:d4:4f:55:85:
                    0d:12:4e:10:8f:61:83:ad:f0:9c:cc:43:ab:d8:34:
                    52:77:24:84:96:6b:e3:94:fa:d6:b5:7c:90:d6:86:
                    64:a3:35:58:e5:83:72:16:94:eb:88:0e:7a:b5:d2:
                    05:85:76:06:b3:b1:86:c4:14:f5:16:ec:55:5f:54:
                    1e:43:55:bb:bc:ef:46:74:2e:fc:81:66:01:41:02:
                    be:dc:b3:88:35:52:99:70:f1:4f:fe:72:f7:02:30:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:A4:F8:33:64:0E:77:F0:07:02:4B:91:B2:B3:E8:69:BC:6C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:ef:1a:37:e2:59:80:6d:99:ea:8c:74:ae:db:c9:33:eb:
         46:be:35:e4:6a:98:94:ca:f6:73:7a:8f:cf:07:cd:56:89:07:
         e3:c3:fc:8e:5b:b4:1c:55:cc:d7:bd:da:66:bb:90:20:17:a7:
         47:72:89:5d:7d:23:db:f8:1c:8b:25:5c:aa:f5:0f:a0:d6:cd:
         2b:7f:59:08:54:8e:52:d5:1d:8d:83:91:cf:ef:18:61:b1:6c:
         93:c3:92:2f:84:d7:19:5a:da:a0:44:27:c0:09:08:ec:8d:36:
         27:07:d9:9e:84:4e:22:6f:f8:f3:c2:04:38:39:c1:69:98:41:
         b4:48:46:d6:70:4a:98:bd:55:50:3d:10:da:b7:de:0b:1f:57:
         59:f8:cc:e3:9e:f9:a8:70:1f:23:03:2a:a4:a1:da:56:19:28:
         e1:89:44:c1:90:e5:e6:2d:1b:f6:4b:1a:7a:be:38:52:9f:96:
         53:7b:07:91:3e:ea:5b:1a:76:e2:f2:98:bb:8b:ff:f0:34:ff:
         42:43:3d:37:f5:da:87:42:87:0d:af:02:34:ff:1d:30:28:72:
         9f:46:04:86:c2:08:f0:d1:2f:c1:6e:9e:ee:83:2c:00:9a:ac:
         fe:1a:9a:84:7a:aa:1b:67:61:c3:37:fb:95:54:90:7a:c2:9f:
         d5:8e:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:54:02 2025 by rpki-client