Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa
File:                     0ca7652f-80fb-3822-9a49-891d6974860f.roa (raw, json)
Hash identifier:          /5GJykljSI5pCU985agh6WTXP8zZethnc/Pw2Hkeitg=
Subject key identifier:   19:A4:78:8D:A4:E4:53:9F:65:56:8A:59:BF:AD:BA:DC:F3:CF:08:07
Certificate issuer:       /CN=cd737608-8321-4248-8093-6c1db3c96df0
Certificate serial:       010D0C9F4328584A2C200958EC91B6B353637A00
Authority key identifier: 7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     3580
IP address blocks:        2602:81a:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:09:58:ec:91:b6:b3:53:63:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd737608-8321-4248-8093-6c1db3c96df0
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=33cdb7fc-38c7-4718-8155-d208bd1c889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:21:47:a9:16:b2:b8:1c:1a:56:a5:49:95:
                    44:95:f5:cd:c2:68:dd:8c:bd:c8:6c:92:52:f6:e1:
                    19:e8:8e:0f:a5:dd:1c:23:35:c9:1c:44:08:bd:49:
                    d3:f7:6b:62:4a:e1:77:32:90:ca:27:0a:6b:28:cf:
                    a6:18:2a:8b:03:85:d6:2a:0c:c1:d2:4a:74:8c:07:
                    ab:d9:da:98:98:a8:b7:89:b5:05:07:b2:b7:64:a2:
                    5a:1d:8c:02:36:a5:53:79:71:c2:3f:6c:3c:9c:80:
                    39:e4:df:50:a8:82:5c:17:9a:7c:e8:15:8c:e6:c4:
                    c7:d7:fd:20:7a:ee:98:56:f1:b9:b4:56:1b:b1:61:
                    2c:6b:31:b8:f7:22:18:32:69:ea:4b:8f:60:df:60:
                    27:4d:ab:46:ae:c1:17:84:4c:a9:63:6f:c7:c1:bd:
                    d0:55:26:0f:e8:7f:a7:83:ea:46:40:04:5d:bc:b8:
                    60:6c:59:6c:93:c8:c7:65:1c:75:42:72:f5:d3:c9:
                    03:80:27:e1:e7:2d:05:d2:70:b9:4d:96:8f:5a:ff:
                    e7:f3:78:9d:bf:9c:cc:96:c4:9f:85:f7:53:c1:2a:
                    19:0d:8b:50:a4:ea:a6:e7:e7:c4:19:a6:d5:55:86:
                    98:92:d1:de:9f:54:cb:ed:6b:41:9d:ce:6f:0b:38:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:78:8D:A4:E4:53:9F:65:56:8A:59:BF:AD:BA:DC:F3:CF:08:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/0ca7652f-80fb-3822-9a49-891d6974860f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:80:d6:ed:f3:e9:c1:e3:2b:b0:18:91:f1:c5:00:a9:f9:
         4f:77:ab:d7:7c:44:fd:1a:7c:93:f2:27:40:fa:c4:ca:57:62:
         fc:06:be:51:6e:11:35:8c:04:83:8c:94:20:da:9f:0b:f1:98:
         2a:b7:1c:b3:b7:a0:42:77:ef:6a:50:01:bd:17:eb:3a:b9:0c:
         f3:18:9a:7f:99:97:b5:e6:9d:88:88:d9:af:c4:1b:5a:5a:f8:
         05:46:bf:05:82:85:51:c9:93:33:06:8e:db:c8:a3:d4:f7:24:
         83:61:03:57:6a:a1:03:c3:55:48:8c:0e:18:d0:3e:a9:29:7a:
         99:e8:6a:f5:d7:da:2c:ca:34:2b:f4:1b:1e:23:c7:d7:37:ab:
         74:84:d3:3e:5b:af:de:de:b9:3e:a3:f9:7f:78:5a:0a:f1:58:
         c7:b3:ae:ef:bb:77:12:e8:93:f1:8c:6b:0a:87:00:a1:13:d0:
         e8:52:63:ef:b8:3e:bb:7a:70:32:a0:71:ec:38:9d:1b:fb:a4:
         b7:a9:2e:7d:17:26:cb:c3:8f:e0:10:53:50:e5:e0:5c:a7:39:
         c1:5f:9f:49:64:07:39:84:f0:6e:cf:ef:be:5c:c3:83:18:04:
         59:24:b1:bd:12:72:58:bc:e4:ee:6e:3e:e9:c9:66:b4:4e:bf:
         58:02:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:28 2025 by rpki-client