Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
File:                     9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa (raw, json)
Hash identifier:          gFgQ7R7yg6qMEamugHKyh8RTz6d/u47pWdp7YFuPgaA=
Subject key identifier:   5B:C9:EE:A9:3B:4C:BD:93:19:C8:3B:44:6E:D7:66:75:79:E4:2E:79
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584AA85BB1470DB56044E1F13510
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     203283
IP address blocks:        2602:2db:11c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b1:47:0d:b5:60:44:e1:f1:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=0204f25e-5c89-4452-b903-d16512f3a4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:4a:19:6a:9f:f1:ca:55:8b:d5:ec:69:0a:
                    1a:78:ce:d1:c5:8d:ba:a2:55:62:c0:45:cd:d8:90:
                    c9:65:95:63:d1:06:81:c0:6a:c8:a3:ea:d9:a3:e4:
                    c1:a5:c0:8f:3f:cd:71:c9:d2:c7:26:e5:52:f7:3e:
                    01:a8:76:29:a0:65:c6:6d:94:99:85:d0:d4:58:04:
                    fe:87:f1:53:86:a4:af:88:cb:e6:9d:ac:43:68:26:
                    66:49:ce:e3:85:4a:0b:05:31:50:ed:cf:72:b6:af:
                    89:1b:bb:cb:8d:d0:dd:bd:c3:84:61:2d:2c:73:9e:
                    d8:94:ed:9f:e2:fa:74:02:54:03:b9:6a:be:63:99:
                    0b:db:1a:63:6b:6b:2e:e0:3b:21:19:62:f8:06:a1:
                    97:a7:3f:1b:b2:ca:45:44:82:21:34:ed:4d:8c:12:
                    54:2c:f7:ef:e7:5b:03:30:2b:86:1f:e1:e5:44:9b:
                    bd:b8:5d:01:67:6f:6a:79:83:d3:5c:89:d8:21:7b:
                    48:5f:f2:db:e2:11:59:a0:5b:a2:57:8b:e5:6b:25:
                    1d:62:2f:8f:2f:22:65:79:f8:8a:fc:23:ec:63:70:
                    a7:a4:15:9f:2d:fd:70:1e:a6:95:75:64:5c:cc:a4:
                    fe:50:f8:b7:7b:eb:0b:45:da:1e:32:17:65:1e:d2:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:EE:A9:3B:4C:BD:93:19:C8:3B:44:6E:D7:66:75:79:E4:2E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:11c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:c3:f6:cf:e7:8d:89:70:40:a3:c8:c0:32:ab:20:7a:5d:
         19:4a:dd:08:47:18:b9:cb:23:64:bf:d0:e5:e9:9a:92:ec:e0:
         2e:0c:12:09:34:90:3f:d4:78:4d:bb:62:3f:8f:20:71:a7:9f:
         28:bf:0e:cc:f0:01:f0:34:eb:a1:14:16:57:74:bc:c3:35:32:
         51:9a:98:97:85:30:9b:86:f2:d0:8d:85:0b:9b:97:bf:45:5a:
         3a:8e:00:21:dd:f4:84:ad:2f:82:62:6c:2d:b5:83:a8:a4:55:
         b6:b6:92:b3:bf:b1:0b:7d:2f:5b:e4:65:52:c1:eb:d6:58:88:
         f1:7a:bb:9c:f9:a8:d5:15:a1:cf:05:ed:ef:1f:16:cb:1b:e9:
         a7:f7:14:a7:3d:1c:99:98:86:18:27:30:fc:b8:53:38:fc:0b:
         54:63:cf:86:a8:9b:bf:65:44:fc:34:59:dc:ec:7e:3b:93:be:
         fc:71:98:a7:a5:b8:06:53:74:62:ff:db:f2:ee:70:01:9d:db:
         59:12:68:c4:57:03:43:cf:c1:53:29:99:2c:22:44:cb:f4:d6:
         ab:ed:2a:9d:b1:1a:ea:a5:63:4f:2d:a1:7d:61:a2:79:80:88:
         61:37:a6:05:cd:68:55:42:2f:31:ca:25:56:2e:57:e3:39:db:
         37:a9:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:36 2025 by rpki-client