Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa
File:                     6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa (raw, json)
Hash identifier:          q6Ofv92jZRGkiw6wDJHEzM312SA+JLd5SLncWyRdP3g=
Subject key identifier:   AE:55:88:5E:F6:24:81:C3:DB:26:6A:9A:59:9A:27:87:A4:43:A0:AF
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F43285849FCAA6957E547FF13254CD080
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     62787
IP address blocks:        2602:f6d0:ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:69:57:e5:47:ff:13:25:4c:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=2fa7d79e-7809-4a14-b083-68e5cc7281fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:71:4f:41:b9:6a:02:78:6a:d2:60:08:d1:
                    1e:75:aa:2f:69:e2:8f:20:b9:65:2f:0d:e9:15:c7:
                    f6:f3:1b:e6:a5:30:28:d9:82:b1:4f:9a:71:e2:7a:
                    13:55:5e:70:30:25:64:69:22:69:99:30:85:1d:cc:
                    ac:f9:aa:8d:42:f8:50:48:2a:ce:cc:fa:a3:54:49:
                    de:eb:98:13:16:df:99:03:dc:9d:9a:60:68:eb:1c:
                    0f:25:99:bc:1e:4c:9c:ed:53:6e:d8:0a:97:eb:4a:
                    58:68:02:01:a3:46:be:9f:2c:af:fb:30:b0:1e:2f:
                    c6:3a:af:b9:f3:05:97:e3:09:12:b9:10:2f:00:cf:
                    6a:f6:96:54:bc:0b:11:c6:30:4c:aa:11:7b:51:0e:
                    8c:88:5b:36:c5:0d:cc:a2:a9:10:94:fd:3e:0b:74:
                    af:80:e4:29:f5:71:db:5d:74:85:bc:50:58:b9:ca:
                    6c:5a:c7:15:a0:32:3d:d3:ad:8e:c7:56:fe:8f:52:
                    03:5b:8d:da:72:e4:64:87:34:d8:38:91:60:92:98:
                    94:98:fe:9c:b7:89:a0:49:f9:a8:22:12:e9:13:36:
                    c9:7a:34:43:96:e8:cc:88:46:2b:62:56:06:7a:38:
                    60:13:6c:8e:a5:c0:ad:3e:be:9a:79:89:0b:12:0d:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:55:88:5E:F6:24:81:C3:DB:26:6A:9A:59:9A:27:87:A4:43:A0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/6ebfdc7d-9574-380e-8a9e-985f313fa2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:af:8d:36:70:a4:7d:0e:8a:a9:55:5f:8c:48:d0:f1:7b:21:
         f4:ea:52:9e:ae:81:17:51:4a:1e:ff:c0:cf:39:27:ca:c7:63:
         85:6e:3d:b2:b0:4a:66:fe:4b:7e:5c:98:33:ed:e5:03:4d:d1:
         e0:dd:1f:e3:b0:c8:80:38:35:02:55:0f:74:ef:35:f5:ee:bf:
         76:05:2d:a0:64:70:5e:13:fc:2d:40:44:81:d9:67:f7:94:d6:
         44:09:97:8a:4d:77:73:75:50:39:94:d2:65:ff:54:fd:fc:b3:
         1d:38:cc:c7:3c:2e:aa:ae:e9:a3:d0:d9:31:1e:29:24:d9:74:
         29:4b:b2:25:10:1b:90:a3:34:28:9d:a5:57:0a:60:2a:42:02:
         7d:7f:5a:e1:97:81:3c:53:0a:ce:5b:0c:6e:df:01:0d:4b:5c:
         e3:48:99:9c:1f:3c:bf:51:fe:34:fa:58:b3:f8:53:d3:23:10:
         70:76:84:59:c3:e0:01:33:40:1c:27:4b:eb:97:1c:aa:b1:71:
         a8:8a:94:bb:80:87:02:56:f8:54:96:f4:8d:8d:fe:42:85:32:
         24:d1:16:48:df:ad:0a:5a:89:59:d0:54:8e:c4:a2:91:4d:2e:
         e0:ad:65:dc:6d:53:70:cc:ea:0e:70:f6:81:35:c0:75:5f:ad:
         d9:35:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:15 2025 by rpki-client