Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
File:                     ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa (raw, json)
Hash identifier:          ZcEp6sxSs3MqiLeGPEKdWT/5zc60u+9vZjffOEK57U8=
Subject key identifier:   B5:7F:F3:B2:64:D3:D9:FB:D4:79:B8:FE:35:7B:A0:BD:8F:CD:B6:C5
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A14656B79913B2C2AB25EF900
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     199266
IP address blocks:        2602:fd6f:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6b:79:91:3b:2c:2a:b2:5e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=f51aef45-40b1-465d-a50e-96dd606dafe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:77:59:3d:d6:38:fd:e4:be:67:e6:aa:35:
                    e9:7e:5c:94:3c:c5:72:3c:7a:03:91:13:31:4d:36:
                    60:20:6f:ab:5c:25:2e:08:44:6c:9f:ad:e1:8a:2a:
                    b5:d8:45:22:ab:31:2c:81:a0:df:b7:e4:d9:19:d4:
                    54:1b:a2:04:82:24:21:52:aa:34:55:35:96:92:72:
                    5a:6e:c5:5e:c1:95:e7:00:46:a1:b7:36:1b:7b:fe:
                    64:7d:04:7d:91:0c:16:c6:90:04:50:fe:00:fc:b4:
                    6d:63:47:d7:c3:f0:b7:6a:9d:da:23:bf:ec:71:68:
                    6b:e1:fc:d5:1e:39:1b:30:82:16:12:b6:82:ed:c1:
                    b9:82:20:e4:54:c5:33:60:cf:68:58:53:c3:63:5b:
                    07:e1:cf:71:3a:b3:3f:0e:4a:b4:ec:65:aa:fb:5b:
                    01:d1:78:70:0e:fd:2c:ac:2d:04:64:a3:03:91:dc:
                    1c:9c:37:0c:04:01:82:b5:f4:7a:a7:f9:92:e1:54:
                    95:e1:31:e6:e0:54:61:ec:4e:d0:ef:eb:bd:d5:98:
                    17:86:17:b3:93:37:2c:4c:2e:e8:a2:8a:21:25:25:
                    8c:c9:35:73:11:4f:d4:1e:cd:43:95:9b:03:b1:fb:
                    53:60:72:ed:2b:25:3c:4b:11:98:6e:3f:08:f2:b6:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:F3:B2:64:D3:D9:FB:D4:79:B8:FE:35:7B:A0:BD:8F:CD:B6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:40:4b:4d:2c:4e:26:36:6e:3a:61:2f:cd:96:3e:3d:c8:cc:
         c9:77:f0:fc:92:0a:26:b6:6d:97:57:7e:fc:a2:13:39:3c:c9:
         36:64:ea:16:77:f2:1a:f5:dc:91:af:41:30:ec:c9:95:ab:c4:
         2e:83:7e:32:4e:21:6f:03:d0:5f:09:56:7e:ef:c0:6b:2f:f0:
         54:d5:76:d1:92:a3:fa:14:17:4f:da:af:b1:be:03:e8:85:f4:
         33:a5:fd:ce:af:fb:ef:55:23:b8:00:02:d8:76:5a:61:9d:2a:
         b1:84:8c:c2:1d:4f:54:d8:39:de:87:1b:e6:88:4d:35:08:7d:
         74:34:99:b6:58:a2:11:82:57:03:72:26:df:11:bb:bd:e0:48:
         27:29:f0:d1:e6:ee:11:ce:5b:9a:6a:f4:42:ee:ba:dc:36:93:
         0f:66:6e:1a:9a:39:9d:c3:31:d0:2c:e8:12:d0:85:c0:3b:8b:
         24:8d:36:91:8a:6c:31:e1:52:fc:92:56:9e:38:e9:49:c5:fb:
         ec:fd:36:97:3a:20:e3:74:e2:51:c0:9c:e6:7b:6f:43:01:98:
         2a:34:83:ea:ad:cb:96:a6:11:ec:98:fb:4d:f8:60:24:1f:f5:
         a7:3a:17:65:47:3b:2a:7c:a5:fd:2b:80:d2:9f:59:49:f6:58:
         32:4d:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:49:36 2025 by rpki-client