Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/1205932e-d551-3445-8960-358423cc47da.roa
File:                     1205932e-d551-3445-8960-358423cc47da.roa (raw, json)
Hash identifier:          SwmOUB0mOYw0uxqpsHk32E7VfmJ+7JdvLu82CazePEM=
Subject key identifier:   72:D6:36:AB:47:D1:73:18:C1:DE:C0:55:BC:35:6B:02:95:3E:75:E3
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F4328584A23C01DAABFB796BD312E3B80
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/1205932e-d551-3445-8960-358423cc47da.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     397032
IP address blocks:        2602:fa87::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1d:aa:bf:b7:96:bd:31:2e:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=56e6bcb1-d7b2-4ddf-b335-b02cbe913da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:e9:f1:c2:83:16:5a:6a:86:42:4b:70:8c:
                    91:ce:19:00:f6:84:ef:d4:86:8b:c4:b8:b7:5d:f5:
                    c0:d6:23:a0:8d:56:7d:f2:22:84:73:e1:a4:c4:d3:
                    a0:8a:30:73:fe:f6:6b:28:a0:2e:b3:71:c6:56:0f:
                    fe:4f:aa:0b:57:6d:1f:95:c9:0b:a8:02:fe:cb:f0:
                    b4:c8:fa:12:c5:0d:73:24:fc:21:09:fb:bb:79:dc:
                    e5:c1:58:93:4b:be:38:5f:25:0d:42:bb:d6:ce:f3:
                    ac:9a:49:59:80:28:fe:f9:93:1a:e0:df:97:65:ca:
                    04:fe:a9:f3:df:7b:09:7a:58:e1:0a:39:fb:e0:2e:
                    cf:a1:d4:2b:10:55:44:ce:82:17:5f:2a:b8:4f:ad:
                    9c:04:0f:cd:eb:46:1f:33:7f:64:ca:10:28:f8:03:
                    f6:d4:f5:a6:31:13:33:99:a2:6c:74:37:bf:f8:74:
                    5f:52:17:0b:06:44:c8:f6:43:06:c2:ac:0c:db:9f:
                    9f:b3:8b:74:a0:5c:5f:8e:e7:cf:35:3c:43:db:ff:
                    ab:82:1f:2f:78:35:64:2d:11:9f:37:8c:d9:e4:a2:
                    b2:68:f2:8e:92:da:0b:09:51:7a:98:3c:d4:89:2e:
                    c7:a3:3b:0b:ec:07:b0:a1:de:9a:62:13:87:ea:d6:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:36:AB:47:D1:73:18:C1:DE:C0:55:BC:35:6B:02:95:3E:75:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/1205932e-d551-3445-8960-358423cc47da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa87::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:18:a4:a9:81:72:13:69:7e:67:25:47:ff:9b:98:87:0b:
         11:f2:eb:ed:9d:b3:76:c5:ce:8b:8a:ae:0a:e0:99:7c:32:17:
         b8:aa:21:40:a1:5c:ee:82:f8:6b:c2:8b:79:bf:6d:c1:6f:a6:
         e9:36:b0:db:04:35:e4:7f:93:1e:19:ec:28:08:b1:1e:55:16:
         df:99:8d:c6:97:3e:4a:e2:1f:25:f7:ce:6e:0f:90:a3:ac:8a:
         27:2f:12:fc:40:d8:73:2e:b7:e4:d4:37:58:02:fe:01:0c:38:
         c3:aa:61:0f:7e:ea:88:2e:24:1f:4c:87:07:fb:b5:9b:43:fa:
         07:45:10:3d:15:32:b6:33:b5:8f:d2:84:d7:58:c4:4b:1c:08:
         ce:c5:ed:a5:3a:33:7c:aa:b9:70:ff:5f:4a:fa:76:85:57:15:
         18:dd:1d:bd:5c:dc:4c:05:c5:d0:1f:ea:de:e0:18:db:d7:89:
         58:79:56:a6:0b:c4:60:59:92:3e:9e:c9:cb:0b:3b:41:e6:2d:
         cb:52:e7:6e:d2:c8:5d:d4:2e:6e:08:42:04:27:2a:3c:b7:b7:
         fa:91:c9:d8:56:2f:ad:1a:51:6d:e4:48:46:29:10:fd:4d:23:
         28:dc:fe:e6:aa:80:8d:3a:1b:16:55:19:74:05:dd:d0:b9:1f:
         4e:19:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:48 2025 by rpki-client