Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa
File:                     4afbdce2-040d-3c70-8578-c9ffbc66f643.roa (raw, json)
Hash identifier:          /18Sp7rt0RZqOzpqNW/axD2aUq24lvi7QduOgSxhwik=
Subject key identifier:   85:A0:E9:A0:54:06:5B:52:30:57:F9:0F:DA:02:C7:3C:07:84:1D:A9
Certificate issuer:       /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial:       010D0C9F43285849E4EFB41FD76C8DCDD0F59360
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     19625
IP address blocks:        2602:fc59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b4:1f:d7:6c:8d:cd:d0:f5:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=62205b1b-6565-416b-9e46-0c8058b93ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:d9:91:18:e9:69:85:46:1e:41:85:d4:a8:
                    f0:23:b2:6e:4a:ff:49:8a:80:05:7c:8e:2c:54:83:
                    ff:a9:48:55:9f:e2:85:01:42:48:a5:3c:06:25:54:
                    90:3b:23:8a:08:33:3d:3f:18:1e:e5:28:d1:42:e0:
                    54:e1:70:67:f9:be:de:24:8d:a7:8b:cf:01:3f:d2:
                    cb:f8:a7:1d:ef:ca:dc:73:7a:84:45:e7:36:68:4b:
                    b8:62:94:e2:41:e6:ab:02:60:f8:8f:06:b4:7e:cc:
                    26:3e:32:8e:cc:ca:34:59:0f:62:a8:35:f0:bd:63:
                    83:d7:02:4f:48:d1:7d:90:dc:bd:92:ea:9f:d9:9f:
                    0f:1f:8c:4f:f3:ee:14:23:76:35:2b:2b:a6:92:51:
                    bc:8b:9e:5f:9d:ec:28:b1:06:f3:43:6d:70:16:ce:
                    72:20:f2:0c:f8:53:3b:6d:70:40:9f:86:30:e4:68:
                    43:ce:50:4e:c0:ba:f2:6c:d3:1f:8f:50:e1:ad:e7:
                    79:96:e0:03:65:a7:14:a4:5f:9a:bf:9f:5a:08:c3:
                    cb:88:4f:26:39:9a:62:70:6a:c7:bf:13:b5:71:5b:
                    6e:c7:64:07:75:13:1c:16:2b:76:b1:e4:94:8a:a6:
                    e2:9a:48:e5:92:20:a4:90:42:3f:56:75:91:27:b9:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:E9:A0:54:06:5B:52:30:57:F9:0F:DA:02:C7:3C:07:84:1D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:eb:ca:80:f7:51:3c:b2:c0:2e:03:76:69:ae:62:9e:ac:
         92:48:51:8f:f3:cb:7d:e2:df:5f:8e:01:af:1e:b0:78:fa:aa:
         41:90:04:e5:91:99:0e:44:ba:d1:00:5e:1d:b2:96:56:1f:e1:
         70:56:af:3e:43:55:98:13:f0:13:93:49:8b:13:84:c3:f2:45:
         51:f1:ba:20:87:9a:9a:99:55:f3:88:23:9f:99:e0:06:ff:95:
         31:0c:16:15:29:ce:31:f0:8a:1b:f2:b4:70:5d:c7:9c:9a:43:
         ee:90:b9:b0:20:ae:e1:eb:1d:3d:4c:d4:39:f8:ed:f7:a6:fc:
         8b:75:78:8c:d1:36:d0:3d:e1:8c:fa:00:08:e8:3b:bf:2d:67:
         1e:7f:c9:48:7b:17:1a:5f:03:71:ca:2b:97:00:93:52:6b:44:
         c8:a6:29:48:9c:ca:a6:1d:e9:60:44:b4:27:d1:10:2f:0e:92:
         73:e6:09:06:31:61:27:cf:9d:3f:c8:4f:30:e0:7b:d7:b3:d1:
         28:18:af:07:86:19:f8:1d:0a:ab:3e:1d:3e:e3:28:2c:e3:74:
         fd:77:2c:4b:9e:0e:b0:5d:3e:02:50:84:f9:3f:90:f9:52:e0:
         14:b0:e0:63:d9:0d:5f:7a:89:24:71:bd:fa:97:db:0b:d5:9b:
         69:0e:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:59:55 2025 by rpki-client