Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/381092d9-1fb1-3d9e-b57b-1c9226d07b90.roa
File:                     381092d9-1fb1-3d9e-b57b-1c9226d07b90.roa (raw, json)
Hash identifier:          qJsIpVanQVD/DpjXDOv8hQCX/9jNlsvyetdZI7TCGO4=
Subject key identifier:   A2:75:04:12:54:0F:BF:E1:67:20:D7:19:3F:A5:4E:37:52:51:C4:05
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F43285849FCAA684D2D5653D460713F00
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/381092d9-1fb1-3d9e-b57b-1c9226d07b90.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     62787
IP address blocks:        2602:f6d0:fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:68:4d:2d:56:53:d4:60:71:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=c967783d-d551-4bc1-8c82-42a18bac17ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:b1:6b:d6:18:08:33:ec:fc:31:04:9b:a9:
                    49:fa:1c:8f:8a:a0:b0:21:80:21:bc:4b:5a:41:c6:
                    e5:b4:7a:66:0d:85:ba:d6:fc:13:c1:c4:f8:d6:63:
                    3f:3e:fe:ee:b4:fa:96:b2:7d:70:1a:9f:10:58:31:
                    b4:00:29:f0:2a:65:f6:b5:f5:df:b3:ec:33:a0:a7:
                    46:76:33:fd:30:a6:92:0b:67:35:14:e2:24:a8:32:
                    c7:6f:d0:6d:77:b1:8d:f5:6f:3a:1a:88:5e:93:71:
                    d9:13:36:19:59:d2:0b:9e:66:52:77:0b:68:61:1f:
                    5f:6e:1a:01:9c:68:0a:52:1c:99:9f:67:00:39:68:
                    b8:79:14:74:d7:b8:3e:27:2f:4a:c1:9a:1a:b0:58:
                    83:6b:f0:f4:38:7b:7e:6b:41:ab:32:9d:2a:60:2a:
                    e4:88:0a:b4:b8:77:8c:bb:a3:7d:5a:59:be:9e:cb:
                    a9:18:ac:7d:6e:10:15:89:b1:b4:7a:5f:b3:38:26:
                    97:6b:1f:cc:95:3e:89:02:bf:58:58:7f:24:5c:97:
                    38:01:ba:9d:19:fe:80:86:c0:23:9f:2c:d1:3f:35:
                    d0:63:73:c2:da:0a:1e:d3:1d:d9:a5:cf:2d:19:8f:
                    6a:a7:e7:f4:20:f9:21:0e:6e:c6:2a:b5:b5:98:5a:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:04:12:54:0F:BF:E1:67:20:D7:19:3F:A5:4E:37:52:51:C4:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/381092d9-1fb1-3d9e-b57b-1c9226d07b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:c3:4c:80:8f:e8:21:e8:41:2b:97:78:e1:6c:db:0f:07:
         9e:3b:00:9b:06:98:1a:83:2f:99:a8:b5:f3:24:e4:bc:f8:ff:
         33:0c:81:5a:e8:d1:64:37:74:36:d7:2c:1f:0e:57:40:f4:ed:
         00:30:d5:56:6c:63:1c:95:e9:0f:6d:7b:fd:ed:73:c0:75:45:
         18:a0:7c:c1:03:d4:5f:0c:84:bd:a5:a7:56:b3:8f:c4:f3:c9:
         14:b8:0a:7c:b1:9a:b2:2c:c2:cf:b2:2f:e5:53:54:57:ce:7a:
         05:96:62:56:4b:2c:08:07:f0:53:0f:12:dd:1e:db:19:18:6b:
         03:99:20:01:dd:72:da:cf:c2:f7:9f:d9:da:2e:1e:79:ff:83:
         79:a2:da:b5:c6:41:57:b1:5e:0d:28:3c:10:ba:f4:52:86:da:
         e1:23:85:07:fa:25:db:eb:49:09:26:e8:bb:8c:7d:3e:f5:6a:
         0d:50:5d:90:b0:0b:72:af:2e:8a:b9:38:58:50:20:b9:e5:fa:
         74:ce:ad:95:a9:81:ce:32:60:fb:30:66:b2:33:0f:13:8c:18:
         a9:c4:fe:5e:df:12:d3:22:e6:fc:89:01:1c:39:c5:ab:d4:87:
         92:50:3e:78:46:00:ee:73:8a:ec:03:f9:fa:18:63:bf:78:6c:
         50:84:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:02 2025 by rpki-client