Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4f5208d4-0f1a-3010-a6f5-e307c55073a9.roa
File:                     4f5208d4-0f1a-3010-a6f5-e307c55073a9.roa (raw, json)
Hash identifier:          WqjmXAXW8FnbrLOhyF3GhAQCB9SJt2WNs7Gulhk346E=
Subject key identifier:   CC:E2:4F:45:D4:D7:E4:16:E8:73:17:27:19:39:87:F5:A1:A6:F8:56
Certificate issuer:       /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial:       010D0C9F4328584A2D857BCD971A3B988E3C7280
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4f5208d4-0f1a-3010-a6f5-e307c55073a9.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     213801
IP address blocks:        2602:f766:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:7b:cd:97:1a:3b:98:8e:3c:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=43d43665-8bf9-4094-a740-6947f6878307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:1c:92:39:6f:54:cb:75:90:4c:0f:9e:4d:
                    e1:7b:56:cb:f1:c1:77:31:33:02:50:ed:14:37:95:
                    cc:58:ae:df:86:3c:d6:54:f2:b0:20:80:18:df:9d:
                    0b:d5:86:9d:93:86:bd:17:30:e5:4b:a3:bc:fe:44:
                    bc:47:65:22:bb:0d:47:c1:88:1f:46:53:b1:01:48:
                    28:5d:79:68:8a:63:3a:87:3d:81:be:16:57:5d:33:
                    3e:7a:4c:74:5b:70:06:0a:79:0e:9f:6e:71:f0:ac:
                    c1:84:59:be:89:12:e1:ef:7e:54:35:4c:62:6b:31:
                    67:64:cf:29:02:05:e0:e2:1c:7d:9c:e5:05:36:57:
                    d7:01:a7:ee:0f:dd:b3:8c:1d:fb:31:54:8a:bd:af:
                    17:84:04:c5:ac:80:a9:8c:01:a9:ac:39:ec:81:5d:
                    8d:0a:b8:b0:7d:25:c7:32:8f:75:00:cf:ce:0f:5e:
                    1d:5b:42:2d:0e:e4:88:c4:52:db:fb:76:00:42:7a:
                    bd:89:cd:22:fa:d4:ca:2d:1d:8c:5e:ae:42:42:26:
                    6a:ce:8b:ab:26:2c:d8:04:83:8e:2a:3d:18:12:e1:
                    fd:d9:e7:49:09:54:d6:4e:a0:12:7a:57:ef:8f:68:
                    2b:c4:0c:b9:c3:30:58:82:91:ca:cd:45:3b:a1:62:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E2:4F:45:D4:D7:E4:16:E8:73:17:27:19:39:87:F5:A1:A6:F8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4f5208d4-0f1a-3010-a6f5-e307c55073a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f766:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:be:59:d5:55:17:1d:d0:9d:58:70:fa:c4:05:d4:9f:37:9f:
         4f:5e:5d:15:d7:fd:a4:5f:ca:de:95:38:69:6f:0b:a7:3a:be:
         11:c9:a5:c7:43:c9:c5:1b:c3:fd:40:95:cc:97:93:de:37:20:
         7b:22:06:38:f8:3b:86:28:5c:36:6a:81:35:28:26:31:db:e3:
         2f:22:19:f4:04:a5:80:25:f7:47:1b:c9:8c:74:d4:87:26:cc:
         6a:57:58:75:38:29:e4:1e:80:54:a7:fe:16:88:d0:e3:48:82:
         3d:7c:96:4b:12:ee:f5:1d:c0:7f:25:78:67:c1:b0:29:46:14:
         f5:68:73:64:90:bd:31:0c:c8:87:7d:69:ba:ba:dd:82:86:cf:
         bd:57:0d:be:2c:d8:ea:b8:61:55:52:b4:a9:98:f3:50:0d:1d:
         d4:64:a9:92:ff:43:31:53:09:9a:c9:55:b0:ab:f2:38:1d:5c:
         e5:c7:25:c0:54:ad:37:c2:77:54:26:10:a0:e6:e6:47:7a:13:
         89:52:a8:c8:68:49:3c:b5:d6:11:bd:70:2a:84:01:07:e6:1a:
         ac:97:21:fb:ef:92:c4:d9:47:d7:ff:6b:61:90:47:25:7e:81:
         c6:ce:04:1f:c7:d1:a7:60:5c:49:06:a2:90:f4:b3:37:7b:11:
         a6:5a:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:20:42 2025 by rpki-client