Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
File:                     9785b2c1-44bc-393c-9287-c1b9c65de83f.roa (raw, json)
Hash identifier:          9HVYnu+yBtvkDTHrWz5mwYUnm4UABFS/+aKhbfMipok=
Subject key identifier:   EB:26:62:43:77:45:F0:00:E8:3A:96:08:99:27:88:8B:E2:17:C5:F8
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285849CE9A5B759123CA2E706FBBC0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     150369
IP address blocks:        2602:fd6f:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5b:75:91:23:ca:2e:70:6f:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=30c81d62-c9bf-412f-b310-f6fccec66cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8c:22:d1:3a:0a:f0:c9:db:67:92:d9:5f:d1:
                    91:8b:f3:70:f1:43:3f:8f:2a:04:f4:9b:35:a9:64:
                    fb:7c:93:17:e7:21:32:3e:5a:5d:52:a8:85:07:47:
                    6f:1e:47:65:fd:4a:e2:c3:9e:ed:55:ca:92:0f:de:
                    59:c9:ba:f6:c3:fb:4f:69:12:47:30:e6:37:67:c5:
                    71:da:3c:c5:1e:2f:30:e8:16:d8:4e:b0:0a:d1:eb:
                    7d:bf:82:f0:d8:5e:67:d5:5c:dd:a2:3d:a1:9a:42:
                    04:f5:98:06:66:d7:ba:ea:de:13:f9:69:a2:1d:99:
                    80:8c:d6:9f:13:ea:87:2e:f9:1a:0c:93:f5:da:df:
                    bf:81:1e:8a:e5:9a:7e:4d:3f:3c:25:f7:18:4c:45:
                    c2:b9:df:4c:81:70:5a:17:5f:b7:99:45:38:74:52:
                    34:4c:47:84:10:f1:59:4a:99:64:37:61:2c:16:be:
                    79:e0:9d:78:a7:fd:dd:25:5f:61:f0:47:83:af:dc:
                    9b:8a:9c:7c:28:ba:a8:40:30:99:86:0c:0b:61:82:
                    ae:90:93:6b:01:74:59:da:da:c0:7c:c8:09:04:cf:
                    9f:a9:4a:41:15:dd:3c:b2:5d:ed:7f:8c:f9:e8:c4:
                    aa:03:a7:9c:c1:9e:7e:73:91:63:dc:8e:93:3d:82:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:62:43:77:45:F0:00:E8:3A:96:08:99:27:88:8B:E2:17:C5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1c:ce:f3:9b:0a:da:20:12:8b:5f:32:5a:c2:37:b3:7d:da:
         56:9b:0c:91:f4:27:8b:ac:c3:b9:7e:de:24:ea:81:e2:ae:92:
         d9:77:21:d9:5f:a3:32:16:b8:f9:c8:70:95:8e:70:3c:fc:97:
         3b:0f:78:11:ff:4d:83:7e:11:4e:3d:49:69:49:c0:1f:73:47:
         a0:49:d1:c5:2a:33:43:26:d4:fc:d7:4a:b9:5b:59:35:ce:86:
         9d:31:15:df:01:fb:c9:00:ab:f9:02:f3:5b:03:c1:aa:2f:12:
         24:5e:9f:cc:bb:7d:8d:90:00:0e:33:d9:28:1f:be:09:07:43:
         ee:8e:23:d3:13:61:3e:b9:9d:fd:e1:f6:94:65:0d:94:dd:ec:
         9c:d6:ce:2c:e3:1b:d0:3d:38:c8:ab:b7:03:d4:1f:3e:6f:2b:
         61:09:9d:b3:06:5e:87:a5:24:9a:72:0e:ce:d8:b6:5e:b4:bd:
         cd:a3:a1:73:18:54:d9:41:a1:8c:6d:7c:89:5c:9d:53:86:a5:
         86:18:1f:d2:f6:6d:45:b4:e7:96:79:eb:1a:84:77:cd:e1:c7:
         d7:95:92:7d:96:fd:0a:7f:3c:cf:bb:c3:71:50:c6:16:a3:f8:
         54:62:d4:88:09:34:e5:29:96:a9:59:db:5e:9b:d4:71:78:42:
         94:6b:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:51:18 2025 by rpki-client