Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa
File:                     1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa (raw, json)
Hash identifier:          t2Je1eWZ9ISKdU/fE40DtJ7B3ycjiShXpOG0POsLDSw=
Subject key identifier:   6E:43:94:E5:B2:D3:2C:4D:85:AB:BF:9A:11:39:37:66:8F:EF:9B:D4
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584A2E1FAC4117E5F66965920200
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa
Signing time:             Fri 13 Jun 2025 18:11:46 +0000
ROA not before:           Fri 13 Jun 2025 18:11:46 +0000
ROA not after:            Thu 11 Sep 2025 18:11:46 +0000
asID:                     32983
IP address blocks:        2602:f9e7:2c::/47 maxlen: 48
                          2602:f9e7:30::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:1f:ac:41:17:e5:f6:69:65:92:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Jun 13 18:11:46 2025 GMT
            Not After : Sep 11 18:11:46 2025 GMT
        Subject: CN=03d5d5d6-0f92-4af9-ad1a-55e14ab343cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:42:1d:8d:42:a9:82:b3:1d:ae:4a:f1:c4:
                    da:11:bd:75:34:4c:df:b2:4d:a1:11:40:66:3c:e9:
                    99:33:b6:30:c4:5b:f2:12:18:29:58:2c:c1:50:2e:
                    c0:dd:5f:03:8d:61:1f:25:74:ea:d9:93:be:68:35:
                    6a:65:e0:40:b8:b6:9f:68:a4:42:ef:21:cd:24:d0:
                    72:8e:08:07:1e:9a:d5:51:d8:39:73:aa:94:73:6b:
                    78:5e:43:97:d5:77:ab:e0:70:03:4c:09:07:a8:9e:
                    38:09:89:a0:de:34:97:5b:8f:77:9b:f4:6d:a4:4b:
                    42:9e:bf:1a:d7:0a:fa:15:b5:0e:2e:49:a3:1a:e6:
                    1c:50:99:8d:45:d8:09:3f:f5:21:0d:0d:be:36:1b:
                    97:e8:0d:f1:20:7a:4e:96:ee:51:81:c5:2e:b0:68:
                    a5:36:c7:c5:5c:33:d5:0f:fb:0d:ee:1d:3e:00:30:
                    2b:8a:9a:43:6d:8e:f1:07:84:e6:b3:77:00:d0:fd:
                    e1:49:e9:cc:e7:11:a6:c3:9b:92:c9:48:be:92:22:
                    30:b9:33:45:37:44:fb:85:69:fd:2a:3e:45:67:d9:
                    d7:bb:26:16:f4:31:8f:b5:7b:d0:2c:49:62:cb:f0:
                    6e:5c:76:2b:8d:45:af:df:c9:e8:f5:b9:67:7a:2c:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:94:E5:B2:D3:2C:4D:85:AB:BF:9A:11:39:37:66:8F:EF:9B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:2c::/47
                  2602:f9e7:30::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:15:5a:e2:31:48:f4:73:4c:8b:9b:17:ae:a2:c6:53:b0:
         5b:e5:b7:d3:67:a5:26:a4:03:82:28:77:c4:93:6a:68:52:ca:
         20:8b:1b:97:13:32:c8:8c:58:d1:70:e9:b3:1c:9c:45:d7:67:
         d2:c3:bb:c1:41:17:01:44:3b:a5:22:50:9e:f2:da:49:96:de:
         d9:32:bf:e9:65:bb:39:35:df:13:1b:58:fc:53:47:d5:41:be:
         30:16:23:7c:a5:bd:a0:d0:92:c3:88:2e:15:59:16:64:2f:7a:
         32:a1:0e:fa:39:b3:7c:dd:de:b8:b6:6d:1a:07:16:e6:9c:fa:
         80:e9:14:06:52:97:7f:c8:5a:96:17:61:21:f2:35:4c:86:03:
         3c:31:a2:a2:15:ac:35:96:ef:3c:a4:74:de:71:51:c8:f0:15:
         36:17:0d:09:39:70:91:75:f8:4b:9c:92:51:26:09:46:53:a3:
         6c:e8:06:df:fd:93:13:76:9a:37:b4:43:58:1a:24:20:cc:65:
         07:fa:2a:e9:25:8f:37:04:e8:0f:24:8a:74:43:83:8a:61:4a:
         97:f9:4f:0e:85:e9:97:8e:79:3c:2f:fe:96:30:c1:9d:1d:13:
         37:75:77:f3:83:ea:7f:b0:9d:c4:f9:3b:74:9e:f0:a9:ca:88:
         2d:c0:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:50 2025 by rpki-client