Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          Q17hCluAJhYTIhTbonNGbCQOQUaGb5KchXxOS3yHwY8=
Subject key identifier:   8C:E2:4C:02:1A:A9:03:27:9A:46:91:97:16:FD:F1:6D:D5:2E:6E:A5
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584A2ABAC8963FBB32983404B400
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:c8:96:3f:bb:32:98:34:04:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=18b708df-89a6-4fb1-b079-0fbfb3bfa192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:69:68:31:f3:92:9b:fb:97:a1:f6:21:af:
                    0e:e4:6b:29:5e:67:1c:87:78:ea:e9:a4:aa:93:b3:
                    47:c9:ec:65:20:6f:6f:a1:b0:e0:54:04:1c:09:c9:
                    9b:05:8c:4a:95:fd:18:02:f1:d4:0a:27:12:00:fb:
                    a9:6c:e6:11:84:69:29:21:bd:ad:b9:71:6b:0d:35:
                    ec:93:b6:50:ee:6a:8b:a5:5a:25:20:25:0f:4c:9f:
                    f7:dc:cf:aa:75:75:ef:ed:91:ca:40:45:e5:92:22:
                    61:46:82:9f:5a:2d:74:c8:f4:7c:22:54:b2:3d:96:
                    a3:c6:f5:cd:ac:c6:a9:d4:79:4a:b2:64:72:8b:59:
                    43:e5:0b:ac:de:c9:11:fa:36:64:b9:f7:d9:e8:b9:
                    f5:03:8a:c8:34:f1:c3:b4:d5:cc:73:2c:4d:c7:84:
                    28:8d:33:b4:a0:03:d9:c5:4b:33:46:5b:eb:b7:97:
                    bc:3c:30:a7:4c:df:7b:bd:ea:eb:b6:80:a7:c0:cb:
                    d7:d2:3d:1a:d8:a0:ea:27:4e:cc:4e:d0:aa:7f:dc:
                    7a:e2:1b:9f:5a:b9:16:18:e6:09:02:2e:f8:03:5c:
                    30:c8:0a:f9:8e:6e:87:0c:ff:56:8b:6b:33:09:6c:
                    f7:6a:47:3a:d6:5a:7e:c2:a3:72:27:b3:cf:e3:dc:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:4C:02:1A:A9:03:27:9A:46:91:97:16:FD:F1:6D:D5:2E:6E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:e7:bb:56:4e:39:84:25:bb:ac:f7:5a:df:84:ca:da:13:
         86:7b:4a:70:52:06:ae:ef:61:e1:f4:f0:5d:86:6e:3b:d5:a8:
         cc:38:d2:ce:1f:44:fa:a5:40:f1:99:6d:6b:0a:43:04:3c:8a:
         38:2a:b6:b6:93:6c:32:c3:54:20:f3:fe:b2:be:25:72:8e:1b:
         3d:8f:b2:c0:e8:e5:8c:ac:af:23:ab:b7:d2:d3:ae:dd:38:dd:
         73:d1:2f:a0:58:57:f3:36:f7:4b:42:15:56:92:6d:4f:5b:1d:
         0c:1e:69:43:6d:8a:9e:56:15:37:20:a9:5b:a3:a3:aa:d8:56:
         7d:37:98:24:08:70:79:ee:4a:aa:28:86:46:4b:a3:7d:e2:76:
         04:36:fd:a2:5c:e9:bb:0f:8b:20:28:3f:b4:de:12:79:66:26:
         9d:8e:6b:0f:f9:24:56:82:ba:93:4d:96:7c:ed:d1:8c:e8:49:
         7e:ba:cf:06:b7:80:d2:be:3e:55:45:0a:95:49:33:65:19:ce:
         9f:98:67:5e:2c:61:1d:42:d7:b3:e3:32:6c:55:ef:62:23:4a:
         f8:ae:3f:17:4b:dd:74:3f:e8:f7:8c:17:64:6d:7d:e6:ef:d6:
         91:e0:ad:c0:02:31:59:db:f3:53:10:fc:76:9d:86:23:e2:f2:
         a9:d2:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:41:42 2025 by rpki-client