Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa
File:                     bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (raw, json)
Hash identifier:          L4qRHubNGOuQhZm4UYehDjzlExk9+yLdGAENxog05/s=
Subject key identifier:   87:45:29:42:B2:1B:33:7C:AA:9C:A0:50:BD:B4:89:D0:2C:06:D3:D2
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584A31B565F9AFCB41D0B942FF00
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2602:faca:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:65:f9:af:cb:41:d0:b9:42:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=27b06669-464f-42e1-a469-8ea2b353a36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:a4:0d:e8:06:f4:84:36:26:55:b6:7e:6e:
                    f5:ee:f4:e0:f6:20:3c:b3:a1:da:da:ba:b8:89:ef:
                    f1:5a:fa:43:09:d7:f5:3f:ed:94:47:bf:3b:fa:e1:
                    f3:76:19:71:84:f3:93:c2:04:3e:14:03:25:21:97:
                    0e:10:42:74:37:98:ec:ff:aa:93:c8:f5:2a:88:37:
                    ac:7b:2b:9d:33:6b:90:10:97:ef:1d:43:6c:05:ab:
                    93:68:b8:4c:e4:21:c7:b9:cc:cf:26:e7:a2:ab:d6:
                    72:9a:8c:11:bc:4a:73:11:54:d1:c9:d3:b8:bc:30:
                    bd:8f:a2:74:87:f0:30:02:54:8b:bd:14:01:b4:93:
                    80:05:9f:25:72:1d:f2:b2:b4:3d:49:3b:d0:bb:5d:
                    09:00:7b:7a:a0:cb:77:92:b1:71:fc:09:32:8c:ff:
                    c6:d9:25:b5:a0:8e:5c:07:ec:ea:ad:8e:f5:14:26:
                    fd:4a:7c:4c:94:c1:c7:44:96:c8:c7:fd:8d:b8:f9:
                    e9:f3:ef:fd:a3:97:35:cf:c9:a6:59:01:35:98:6d:
                    a3:a2:9e:fd:08:87:ac:86:90:52:52:62:2a:16:b7:
                    f0:3e:f1:eb:61:58:16:6e:20:a2:08:98:83:c1:c2:
                    ed:9e:eb:48:2f:99:fc:48:11:58:cf:40:40:c9:75:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:29:42:B2:1B:33:7C:AA:9C:A0:50:BD:B4:89:D0:2C:06:D3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faca:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:46:b6:7e:0e:d5:06:10:ef:7e:80:c0:40:9b:82:a8:56:03:
         cd:05:fe:7a:b6:d2:2b:62:d0:76:44:3b:68:a3:64:e0:8d:63:
         f9:37:9e:12:c5:f8:1b:37:f3:94:86:7b:31:88:32:74:b4:59:
         c0:89:d8:11:7c:9b:cc:08:b2:68:11:6d:b6:e7:3b:20:0e:05:
         df:7a:83:74:5d:61:b9:58:03:bd:07:48:46:f7:7e:b3:9a:64:
         83:11:ce:6e:30:24:21:b8:47:4d:8c:bf:ab:cc:5f:b2:5c:19:
         73:03:eb:8a:11:f7:25:f7:54:c8:69:bf:cf:1a:9e:7a:43:c1:
         4d:6b:96:c8:f6:8d:84:2b:da:10:1c:38:6a:4f:c5:1c:6b:b1:
         1e:ae:3e:f1:a7:42:d5:6c:ac:16:5a:11:68:cb:a1:ce:b4:4f:
         88:44:de:9b:f6:0e:f6:0a:5a:e0:02:4c:b5:7e:d0:34:2b:92:
         d4:3d:28:1b:b3:2f:07:73:fa:58:9d:45:ef:96:2a:57:5d:96:
         92:55:2d:4c:28:1d:0a:43:d5:dd:ec:e4:d2:dd:60:08:be:dc:
         3f:09:d8:70:88:40:c8:2c:da:b5:af:72:eb:38:00:98:51:45:
         4c:f3:7d:bb:a4:65:49:8d:3f:d5:a6:a0:c9:c8:2b:ad:86:c9:
         68:06:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:42 2025 by rpki-client