Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
File:                     fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa (raw, json)
Hash identifier:          PijKkbE7FvmBQetjfDRdSxldFvZxIXGUQg/YuUkt2AQ=
Subject key identifier:   F7:D3:31:58:91:BB:9A:AA:03:A5:F9:37:1A:A9:69:A6:B8:E7:DB:46
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584A0D6A801541BCD5E7F43B0400
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2607:8d40:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:80:15:41:bc:d5:e7:f4:3b:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=ca51f6bc-ea74-4d68-9683-cc01a586ce79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:74:30:d4:78:37:e9:7c:71:11:c8:d0:6b:
                    39:d6:ee:54:61:b1:94:61:be:fc:29:63:f2:7d:2b:
                    88:81:39:d1:bb:93:b6:61:85:5b:53:7c:81:4f:3b:
                    af:1a:77:eb:cb:6a:b3:c5:d8:fe:70:d9:53:af:37:
                    da:85:e4:ff:6e:9a:9d:31:23:ac:f1:a6:61:ee:52:
                    fe:9e:8d:5c:27:89:9c:7b:80:1e:28:9d:bc:f4:07:
                    7b:b1:41:cf:a8:8e:d4:2f:18:df:79:2b:73:bd:a4:
                    9a:df:8d:98:5e:76:01:38:2c:08:19:d9:a2:0f:81:
                    9f:79:03:7d:3a:de:fa:83:8a:9f:a4:e0:50:75:0c:
                    15:5a:23:f7:02:4e:9c:6c:c7:b5:97:4d:1d:2e:f2:
                    9b:30:c0:88:5f:d0:7d:da:76:f5:c0:23:1d:fb:55:
                    16:e8:8d:7b:d3:9f:4b:1e:77:33:72:eb:ff:7a:1e:
                    18:05:7e:ff:d9:ad:d5:22:2b:93:64:62:71:b3:ea:
                    8f:76:bb:6d:4c:77:e4:80:5b:c2:a0:62:62:1f:51:
                    2f:53:8d:0e:1e:e9:c2:9f:87:18:80:94:9e:25:24:
                    cb:b9:1b:b1:ed:72:85:b2:31:18:3a:76:7e:d3:2a:
                    7e:ea:c0:5f:21:5e:ba:a5:02:c5:20:50:21:73:77:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:31:58:91:BB:9A:AA:03:A5:F9:37:1A:A9:69:A6:B8:E7:DB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:85:78:d7:0e:fe:2d:d1:14:30:f4:13:43:75:c5:56:47:
         ec:c3:7c:98:59:ca:6e:08:89:fb:aa:7f:d5:ea:08:e9:15:9b:
         6d:41:2b:3a:ba:06:6e:78:b0:18:f1:70:7e:e1:d2:4f:d2:29:
         79:fb:39:9d:34:af:c8:b6:85:32:6b:fa:96:15:5f:7c:88:af:
         b6:c1:97:eb:ec:f9:12:e9:85:f0:ec:60:c0:dd:2c:f9:91:5e:
         07:29:e3:0e:2c:34:9c:5b:ff:b8:10:41:dd:42:87:8e:8f:33:
         45:3c:04:69:fe:43:5f:d6:c9:26:c5:ce:2c:13:c4:dd:3b:f1:
         63:a7:74:bd:d6:ce:41:08:29:0c:d6:48:e0:2c:5b:f7:0a:88:
         61:cb:3c:16:82:0e:d4:16:64:5f:56:c9:8f:f8:48:18:18:0f:
         4f:37:03:6c:8d:8e:db:15:99:54:c0:ba:bc:4c:9e:05:25:88:
         17:70:5f:ea:7c:cc:24:ab:6a:ce:88:ca:c8:54:27:9c:44:3a:
         08:db:39:8b:69:ac:f1:c6:cc:8f:1a:2c:5d:5b:f3:af:79:93:
         d5:9d:19:23:b4:ae:9c:12:a9:e4:b4:0e:f4:45:6d:fb:83:c9:
         4f:4d:70:ba:17:8e:60:6b:e1:5c:bf:3f:93:1c:7f:c7:89:6c:
         ae:78:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:23:13 2025 by rpki-client