Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa
File:                     f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa (raw, json)
Hash identifier:          cvxBsBIcVxznUzQx7+ddWp3RKOcbMBC0PilNin3FRps=
Subject key identifier:   11:34:CC:9A:F5:DE:30:01:E6:82:07:CA:91:AA:3C:8F:99:50:FF:E5
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584A18954A44F599B5CC1CBB3500
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     213663
IP address blocks:        2602:f9f6:440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:4a:44:f5:99:b5:cc:1c:bb:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=01db42de-e545-41c3-ae30-d641ef5c3b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:aa:e5:30:fd:24:95:c9:54:0f:64:b4:35:
                    86:49:c6:d0:8e:c0:f2:db:47:32:f5:07:2a:c3:ec:
                    08:56:7e:ef:d4:e3:67:81:71:3b:b7:41:d6:fa:f3:
                    f2:6e:52:42:81:08:a4:3e:d5:f0:ee:f3:de:8b:57:
                    23:fa:31:a4:41:3e:85:37:00:4c:ca:ea:d6:c5:cd:
                    30:2d:50:aa:20:5d:e5:09:2d:4a:19:5a:bd:b0:f2:
                    6e:fa:87:5f:9f:8d:4e:31:b3:ba:10:5c:7c:b4:88:
                    6e:2b:40:73:f4:68:bf:4e:de:45:3d:97:6f:82:4c:
                    1f:7c:56:87:a4:7e:e7:ee:99:70:0e:dd:14:a4:44:
                    c8:7f:89:b6:e9:93:ea:a5:c6:d3:c1:7d:7e:0b:f4:
                    0b:14:60:91:d6:c3:76:6d:be:96:21:e8:29:52:5b:
                    f8:bc:b7:f4:81:ea:2a:6a:54:05:9f:fa:93:f3:e7:
                    49:6e:95:22:39:b7:aa:2b:f0:06:18:c5:56:98:c3:
                    12:97:c0:59:2e:fa:3d:f4:41:06:0f:6f:65:0e:a5:
                    7d:18:34:4a:29:15:82:62:0b:2d:d8:0f:1f:32:51:
                    54:b9:b0:9b:a7:df:03:6b:89:e0:ee:3d:f1:1d:bc:
                    b8:5a:c9:4c:cc:36:97:5a:a6:c6:89:6c:cd:e2:cf:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:CC:9A:F5:DE:30:01:E6:82:07:CA:91:AA:3C:8F:99:50:FF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8e:db:91:79:52:bf:b5:9b:3d:b1:2d:f7:23:01:9c:cf:c2:
         be:7a:ea:8a:cc:56:9e:90:8d:99:51:df:c2:b1:0c:46:e0:1b:
         3b:ee:13:8d:51:9a:28:0e:17:01:68:58:22:27:45:fd:d0:ac:
         d6:2c:7f:28:de:51:91:0e:93:e0:50:16:de:7f:f5:24:73:81:
         b2:ee:10:88:6b:6d:dc:87:b2:a0:54:ce:b1:e4:4c:eb:37:12:
         3e:dd:b1:2d:d5:74:70:93:0f:c1:53:57:42:02:9c:1f:16:d8:
         21:30:5c:16:76:9e:83:8d:73:5b:68:7a:92:d2:b0:2b:87:d7:
         4f:9a:bf:c6:7a:25:89:77:b3:f3:e1:d5:0e:ea:88:40:77:bc:
         10:3a:19:f2:3c:2b:23:05:85:0a:c2:b9:3b:2e:10:c3:1c:44:
         8c:15:73:17:dc:0f:6b:66:0b:76:24:42:c9:db:6b:94:96:e2:
         0d:13:6b:3d:ef:f7:66:02:58:6e:5c:85:31:7c:a5:4c:56:4a:
         10:f6:ad:22:90:a5:30:f3:45:b8:07:48:35:f8:e5:a8:4b:6a:
         1b:ea:a4:cc:f5:7f:37:b4:ac:96:3e:59:65:5b:f3:c7:f2:fc:
         6a:90:91:f4:ca:e1:a0:dc:c9:2f:0b:95:d7:10:73:4b:76:f8:
         9f:08:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:15:44 2025 by rpki-client