Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7770e37b-9ba0-3b5e-8e05-0deadeec8f29.roa
File:                     7770e37b-9ba0-3b5e-8e05-0deadeec8f29.roa (raw, json)
Hash identifier:          cltnUI10cU3CUVneGCrPEiCvA10P19KxCGObYlCD/+o=
Subject key identifier:   E3:30:54:D7:A2:2D:3A:47:70:55:85:33:14:92:D7:B2:47:3C:0F:F9
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584A331AED8DDDF55E30C2206380
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7770e37b-9ba0-3b5e-8e05-0deadeec8f29.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     31898
IP address blocks:        2602:fdaa:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ed:8d:dd:f5:5e:30:c2:20:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=df3e2dbf-0b9f-4916-8c6f-d36a2271b21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:9b:b7:b0:98:e0:e9:45:4b:b7:55:93:91:
                    21:a3:1c:1a:7c:c7:11:de:98:39:73:92:3b:ce:9a:
                    b1:59:fb:e5:2d:69:6a:cd:9c:0f:9d:9a:d1:11:4c:
                    62:2b:56:c5:c9:b0:9c:6e:ae:69:ce:c1:72:cd:9f:
                    19:a1:8a:15:22:17:d2:8b:5d:0a:29:ee:aa:ec:2d:
                    f5:13:c3:e6:f6:97:dc:0b:e2:8f:d1:cc:91:1f:73:
                    11:fe:6a:4c:dd:d4:f5:1a:88:42:05:04:82:c7:23:
                    a0:83:f2:78:54:a0:ba:e2:a3:63:f2:21:73:28:28:
                    ea:14:d1:85:7d:e8:75:e6:7c:96:9d:c5:0c:1d:c2:
                    ed:ec:5d:d5:55:17:ef:95:8d:84:dd:ab:99:d6:b2:
                    45:7a:a3:fe:58:d3:fd:e0:62:33:ad:7e:99:16:03:
                    3d:5b:70:4a:0c:5c:df:6d:59:d2:fa:7a:ac:9b:15:
                    25:40:22:13:84:74:e3:9b:44:f1:d5:c1:1a:90:32:
                    87:1f:98:a5:00:4f:e1:f5:c0:a2:3e:0e:d3:d2:13:
                    ac:cb:b4:d7:7d:f7:2a:e8:24:6e:61:7f:3b:31:96:
                    d0:c5:9a:d6:cc:0f:c1:e8:9f:a5:fd:ed:1d:de:8e:
                    91:61:84:15:b6:c5:9c:84:ce:08:52:08:ca:66:50:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:54:D7:A2:2D:3A:47:70:55:85:33:14:92:D7:B2:47:3C:0F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7770e37b-9ba0-3b5e-8e05-0deadeec8f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:59:df:df:00:d8:69:a0:33:d7:14:7f:f4:f8:4c:d2:1b:ab:
         ed:e2:c6:43:c9:a7:6b:00:dc:b5:90:8f:22:34:38:4a:e9:c4:
         35:f4:f5:25:20:02:5a:0e:aa:b4:ae:b5:81:ed:61:83:30:f2:
         d2:1b:5c:3d:97:e4:49:f0:17:59:45:e6:88:b9:56:e7:4e:da:
         d3:b1:de:03:cd:49:d6:06:af:9c:04:96:1e:c1:84:93:30:4f:
         1a:36:5c:a7:9e:f3:47:9d:07:e7:91:89:e0:34:50:94:82:f2:
         dc:fd:e7:bb:76:c7:34:aa:40:6b:fa:04:26:af:a4:cd:29:18:
         3a:cd:78:c0:97:cd:48:67:3d:0c:be:5f:59:32:35:ca:e3:17:
         bd:ec:94:2f:47:e4:7e:5b:32:15:de:8d:95:3f:78:33:3d:d4:
         5c:1f:a8:20:dc:ed:2e:85:f9:77:82:59:b1:4a:7c:e1:ee:4a:
         ea:43:07:6a:64:b1:8d:2c:a7:06:90:b5:67:f3:01:c4:8c:cb:
         7b:68:88:a3:fe:b6:74:65:4d:28:64:81:82:6c:c0:8c:5b:d4:
         e4:79:51:f8:f5:15:20:4e:fd:1a:7f:1a:98:2d:8d:59:fd:12:
         7a:e3:a3:bd:70:f7:d3:dd:a0:cf:60:2c:67:5c:fc:bb:6b:a2:
         9d:d0:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:31 2025 by rpki-client