Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa
File:                     2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa (raw, json)
Hash identifier:          xit7Decy/iY3K/CvwOE2OIE00ptviRDCTffzug8hUTQ=
Subject key identifier:   0D:29:A3:6A:4F:27:E8:16:BC:DB:3A:0A:24:87:BC:B9:96:A9:73:AF
Certificate issuer:       /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
Certificate serial:       010D0C9F4328584A90A0BFCFBB5706D0463DCA40
Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2602:29e:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bf:cf:bb:57:06:d0:46:3d:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=bbd6f926-ac14-41a5-90c5-19f56aca3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:70:92:fe:09:22:91:af:b5:d8:de:c7:1a:
                    76:81:83:6c:46:a8:45:f1:1f:15:b7:2a:ac:47:c6:
                    ef:18:52:e6:c5:28:7e:5b:f8:8d:8c:27:c6:ea:bc:
                    42:18:18:d8:ba:81:cd:3b:6a:2e:1d:c0:98:e0:a9:
                    ea:8c:a0:d5:a9:29:4e:4d:f0:7c:03:fa:69:76:e3:
                    3a:f7:d3:49:4f:2b:10:55:7a:32:74:07:fa:43:86:
                    e9:04:d1:6d:ac:35:3f:3d:ea:68:7a:e5:02:44:98:
                    f3:5e:37:e8:0a:ef:1d:dc:fd:87:a5:26:75:a4:16:
                    32:32:22:ca:35:99:5f:d8:d6:df:19:37:fa:9a:c9:
                    00:9b:75:1b:a6:59:80:f2:2b:88:98:68:d6:c9:16:
                    29:93:a2:52:32:72:be:e5:4c:e9:cf:99:65:36:9f:
                    73:4f:c4:74:2d:54:0c:16:38:03:d2:14:66:63:0f:
                    6f:81:b4:e7:45:4a:0b:7d:1b:7f:00:51:c6:9f:5c:
                    cf:0d:73:71:64:89:8f:7b:5a:4c:f0:28:79:bd:ed:
                    4e:7e:a8:03:f9:de:ca:a3:b0:a1:be:f2:cc:44:a7:
                    23:74:fe:38:bb:1d:2a:7a:e9:37:76:b1:da:20:ae:
                    e2:cb:9c:fd:2f:90:51:4f:3d:e8:7e:7c:ed:42:4d:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:A3:6A:4F:27:E8:16:BC:DB:3A:0A:24:87:BC:B9:96:A9:73:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl

            X509v3 Authority Key Identifier:
                keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29e:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:35:0e:52:fd:0a:30:b0:89:b2:34:6e:d1:8d:41:03:98:
         64:1f:9c:99:ba:f2:4f:eb:c5:23:97:c3:31:db:ca:af:23:d0:
         93:3b:35:0c:e9:1e:b9:27:89:7d:3b:f1:d7:74:2e:c0:35:46:
         ff:c8:ea:c4:1b:83:13:b4:8a:da:45:6a:f8:9d:9f:ea:6c:f6:
         3e:79:4e:3e:fd:73:57:95:d4:ab:68:fd:03:cf:64:ec:07:bf:
         33:ba:61:a0:e7:71:12:f6:ee:f8:72:fb:88:7b:e8:b3:63:e2:
         ad:e1:03:ac:f4:2a:f2:3e:25:75:bc:ab:9a:48:c6:24:02:c4:
         df:bf:46:f8:e8:f0:b1:9d:6a:55:6a:e3:ac:26:2c:83:27:ab:
         ed:de:29:74:18:4d:f4:40:fd:00:c6:89:ac:26:ac:ad:bf:c5:
         9d:ee:ff:f0:82:fc:ea:9a:4f:2b:8b:84:3a:88:a2:f0:70:e8:
         91:ba:b0:40:d1:3a:3a:06:42:dc:a4:56:ee:87:a4:61:c4:86:
         2d:1d:ba:27:9b:5a:14:6a:bf:be:47:89:a2:76:e4:61:19:ee:
         92:57:2d:92:d9:26:4c:e8:2e:6f:d8:97:0f:97:5f:d2:b4:17:
         fb:1b:e6:4a:f3:30:d3:92:53:10:e4:7d:cd:b0:a3:b7:d1:d5:
         cd:d0:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:00 2025 by rpki-client