Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
File:                     ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa (raw, json)
Hash identifier:          7CX/AKSCrouoUrqqi/a8HStGIGyUDdKHXZqwKEIQoOQ=
Subject key identifier:   B4:28:5A:B4:18:E2:51:B7:BF:B9:50:CB:70:EB:40:C7:56:0B:A6:D9
Certificate issuer:       /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial:       010D0C9F43285849FCAA75BE6CD071B8100AFB00
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        2602:801:600a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:75:be:6c:d0:71:b8:10:0a:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=534f3047-bafa-4c52-b817-589a33ef5289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:da:40:56:4c:2d:d5:1a:f0:ef:80:a7:c9:
                    4e:41:c5:d2:e0:cd:43:fe:bb:35:00:ca:b2:a3:11:
                    f9:f5:77:a6:39:52:c9:f2:84:c0:aa:af:02:99:ef:
                    ec:1e:95:5e:09:08:06:bd:9b:94:1a:5e:7e:95:c5:
                    56:6b:e0:4e:3e:a4:4a:9a:10:67:f2:a3:3c:06:25:
                    71:cf:09:40:72:e0:bb:7b:20:98:60:72:a4:61:ee:
                    5b:2c:80:2d:98:61:e7:c2:ad:9a:85:0c:47:ec:cb:
                    78:4a:6c:28:ee:da:0d:38:59:c0:a8:fb:46:a6:bd:
                    55:2a:c1:f2:94:6c:ff:12:3e:1a:a2:1c:0a:fe:53:
                    a5:0a:9f:80:fd:16:65:54:d9:d6:e3:63:65:e4:e4:
                    1c:7d:a0:7f:cf:d2:c8:4a:bd:64:9f:dd:87:4c:87:
                    91:74:b5:ba:89:6b:c2:44:dd:8c:d3:55:6c:0b:a0:
                    75:f6:9f:7d:7e:ae:17:94:46:55:32:91:36:30:c6:
                    e8:be:49:b9:0a:05:07:f2:f2:22:3d:37:b8:62:c9:
                    da:aa:d8:3a:a8:89:6f:6e:a2:e8:9d:5e:33:02:30:
                    21:d5:1d:d9:78:18:0f:03:24:68:b2:50:e4:7f:2d:
                    d8:07:81:18:6f:da:4d:fc:d6:94:ac:79:c4:28:aa:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:28:5A:B4:18:E2:51:B7:BF:B9:50:CB:70:EB:40:C7:56:0B:A6:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl

            X509v3 Authority Key Identifier:
                keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:600a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:f7:17:ef:78:1d:e9:03:3d:a2:b7:94:a0:8d:7e:61:65:
         64:73:c2:ac:cd:10:14:b5:c9:df:8b:e6:08:b4:9c:60:2c:a0:
         65:b2:3f:e3:2e:ed:61:65:a9:89:70:aa:d8:b7:b2:a4:64:96:
         7f:63:f4:87:e3:b3:b1:53:7c:8c:54:e2:f4:e0:df:c1:33:29:
         1a:0b:be:9a:e5:ad:97:09:04:98:1a:66:7c:d6:96:c5:85:9d:
         a4:66:93:55:60:b0:33:14:73:0c:1c:eb:24:f0:dc:67:ae:dd:
         62:a7:27:c6:cb:1f:52:a7:53:15:28:fd:89:93:c7:91:17:3d:
         0a:d7:38:62:0a:06:9d:bc:a6:6b:74:b7:54:89:96:ea:86:fe:
         d0:54:b6:83:fc:af:cf:38:7d:50:f7:6c:a7:fd:95:65:24:ca:
         68:16:52:71:95:e3:38:02:c0:c0:fb:36:05:03:37:ee:55:8d:
         fa:98:b6:e3:31:0c:84:ff:c2:2f:37:80:aa:93:7b:c7:66:d4:
         02:02:31:75:bc:87:6a:6a:b9:c6:13:85:15:60:d1:a0:7c:a3:
         9f:cc:1f:28:ce:bf:b1:84:66:f0:49:a3:8e:db:54:40:6c:84:
         ea:15:2d:8c:ff:4a:04:8b:e6:e6:92:d3:c0:50:d2:55:bc:53:
         6f:e0:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:23:33 2025 by rpki-client