Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
File:                     bdd25144-8f18-361a-81ee-33720e2febd6.roa (raw, json)
Hash identifier:          Wwmbu0FmOTpo4g+e27SAWgDkNQnSmzKdXy8+ltlgL+A=
Subject key identifier:   B2:C2:62:80:FC:CA:17:FF:A5:4B:B4:76:65:33:8D:0E:24:8F:02:D8
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F43285849F17FD86A99F0B83A4A4AADC0
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d8:6a:99:f0:b8:3a:4a:4a:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=8bfeb91b-0981-4b3b-a211-cd0c86a0c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:13:b9:b1:a0:35:18:cd:3e:7a:f9:99:bb:
                    a6:a0:21:6f:22:d1:43:f5:3a:2c:d8:2c:38:a9:ff:
                    c3:9f:ca:c9:59:62:52:e4:ea:14:b8:df:35:5a:33:
                    63:30:22:11:be:4f:a6:7c:b7:35:2c:58:97:19:b2:
                    02:91:f8:a3:b9:14:d9:63:16:50:9b:ee:0d:0c:f2:
                    b5:96:7a:02:90:28:29:0f:97:aa:31:78:e4:ce:94:
                    f9:78:09:1e:5b:e8:b9:53:9a:e5:7b:d9:9d:94:74:
                    63:e9:49:d1:cc:3c:82:f6:7c:23:6d:9f:b2:43:8e:
                    d8:e5:a1:e6:7e:ff:61:91:4e:2c:f9:d6:ff:07:8f:
                    25:94:e6:6e:f1:4c:54:cc:e4:2f:37:a6:96:4c:50:
                    57:52:b9:f2:96:1e:89:de:fe:df:2d:0a:66:28:0a:
                    2e:d3:8e:8f:b7:ac:b9:22:47:a7:3d:c5:7e:4d:ed:
                    ac:00:43:a3:4d:12:ff:b1:d6:df:8e:68:3e:fc:0b:
                    7b:3f:2e:9b:4d:ab:a4:3d:33:d8:d1:d0:a2:2b:86:
                    80:41:15:a9:2d:f6:8d:a4:a8:69:f3:51:55:54:d4:
                    a6:2a:f0:0d:93:f0:bb:93:a1:76:6c:8d:3d:3b:d7:
                    7c:4f:7e:08:7c:88:8d:82:f1:4f:11:c9:0a:7d:66:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:62:80:FC:CA:17:FF:A5:4B:B4:76:65:33:8D:0E:24:8F:02:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:41:59:00:bf:59:49:23:35:1a:52:b2:dd:3a:f7:61:44:
         a2:11:56:e5:3d:3c:73:a6:5b:03:e6:d2:96:29:3f:21:01:89:
         82:e2:eb:c2:06:34:13:f8:f0:12:fe:a4:3a:4b:ab:72:c3:3f:
         0f:13:83:91:9e:50:da:dd:d5:5e:58:5d:ce:04:38:7f:12:87:
         d9:b0:20:6a:2e:93:e8:02:70:a8:70:27:c0:9b:e3:ce:1f:10:
         ac:9c:b1:00:79:48:81:62:a6:2e:4d:0e:04:f6:fa:5c:31:05:
         32:09:cd:3d:db:47:55:58:c3:23:1f:f4:6b:61:5d:d4:15:a5:
         66:e7:9b:6c:93:2f:78:85:2c:9e:96:fd:74:cf:e2:3a:27:9b:
         e3:c0:c4:e9:86:01:7a:dd:f9:94:da:5a:b1:43:18:f8:18:42:
         66:d1:e2:ff:c0:45:65:ca:e5:55:ba:5a:e0:0d:a4:57:0a:a7:
         e7:43:da:86:db:4b:e0:ad:45:a7:62:b4:a1:7a:a8:d7:6f:b7:
         f4:69:73:14:ea:d5:28:fe:c7:6d:e5:45:8a:84:ec:66:33:a9:
         ef:e8:fc:f4:ab:97:7c:2c:6c:e1:ca:06:52:57:c0:09:4d:16:
         b8:67:a1:fa:58:31:26:c7:90:59:d0:25:3d:2d:2a:f8:b4:5b:
         25:95:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:20 2025 by rpki-client