Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
File:                     ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa (raw, json)
Hash identifier:          xkfwSC7WVfyQ2vYAtF/PkHY7HTY4ZaR9DXZ6CD73Vsk=
Subject key identifier:   A6:4B:BA:40:47:93:87:44:8A:25:38:A8:67:12:D6:6B:97:AA:23:89
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285849ED4FD23634660D98E52E0400
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     61350
IP address blocks:        2602:2db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d2:36:34:66:0d:98:e5:2e:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=409140be-546a-4dee-8395-05ae03e6081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:10:df:de:9d:fb:af:52:4b:eb:0a:cc:33:
                    af:39:88:94:eb:43:b2:42:37:41:3c:2d:61:35:e8:
                    f6:fb:c7:8d:0d:b5:e1:2d:35:79:9e:13:67:51:52:
                    03:b5:0e:d4:13:17:f4:02:15:d5:b9:0b:9f:0b:eb:
                    2b:a8:94:f4:22:46:73:77:76:f0:96:70:65:19:88:
                    d8:85:06:f0:ad:b0:31:5d:33:40:8c:f8:48:25:f8:
                    05:99:cf:24:b0:5f:e2:6a:f7:ce:a8:6f:39:c0:3d:
                    72:02:32:46:e5:db:81:b8:65:fc:bd:d6:45:77:68:
                    d6:70:c3:d2:ea:e7:e6:dc:d6:b2:05:8a:23:b6:53:
                    40:0b:fe:9e:72:f1:0c:03:40:21:7f:36:1f:b2:b7:
                    4f:12:25:11:3f:81:3e:18:3c:26:ff:e9:a5:56:f3:
                    3e:ec:d4:fd:21:a2:1c:88:61:b7:e0:d0:b7:f1:04:
                    ef:62:d7:88:67:bf:60:0c:83:e8:3c:cc:75:68:8a:
                    85:ec:0e:f4:58:6b:98:58:c6:dd:6d:d9:68:33:52:
                    1f:63:9b:8d:bc:3d:ec:73:0e:3b:ac:29:c4:70:37:
                    4d:7b:f6:f4:18:ea:90:8b:16:cf:b9:08:9f:cf:6a:
                    a7:83:e7:09:d9:23:c0:f0:d6:b5:fa:cf:ca:af:dd:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4B:BA:40:47:93:87:44:8A:25:38:A8:67:12:D6:6B:97:AA:23:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:2d:3b:f7:dd:bf:da:4f:b3:4d:ae:6a:37:db:96:6f:20:
         fa:0e:a1:23:46:bd:88:60:a8:58:26:f3:25:fc:72:b7:82:bd:
         18:31:a9:99:23:8e:4f:2c:7f:6e:14:23:cc:c5:5c:f4:20:58:
         0b:7b:ab:cc:30:7d:6d:16:22:ab:b9:6e:6a:7a:53:5d:be:db:
         c1:73:12:ef:68:4a:0c:ba:88:c0:11:28:00:09:71:ac:48:3f:
         e1:27:bf:d7:ad:5f:b6:27:de:2c:c4:d4:b4:eb:69:63:f7:0a:
         2b:34:15:a1:fe:94:5b:be:d2:6a:7d:09:ed:b5:61:a5:ee:b2:
         9e:68:cc:ba:a7:c1:aa:cc:75:79:be:44:cb:6d:a5:3f:25:59:
         a0:78:9f:f0:8e:30:54:33:c9:98:85:5c:91:05:ef:b3:5d:30:
         cd:00:ed:bc:74:eb:33:42:75:04:19:ca:6f:bc:57:a3:c0:ab:
         b0:51:aa:dd:88:27:1f:dd:4d:8e:5d:60:e2:1a:09:aa:21:8f:
         25:d5:c5:b3:f4:9d:e9:4a:3d:2d:8f:b9:39:33:5b:b4:9d:b4:
         a6:2d:76:20:80:fa:12:52:dc:a0:97:d7:ec:87:fa:06:09:7a:
         8a:cf:f0:07:e3:9b:45:49:6d:47:3e:f9:61:c3:86:8b:ef:b1:
         7c:9b:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:18:32 2025 by rpki-client