Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
File:                     4ab593c5-f646-305a-af56-97081a91bc7a.roa (raw, json)
Hash identifier:          ZHhtBaKWelwHapcYYMy+GN6M3Vvf91jNBb0I13FUqJ8=
Subject key identifier:   CB:CC:50:1C:33:6C:C8:F8:8C:C6:C2:E2:9C:6A:AA:54:79:E8:71:D6
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F4328584A0C054B55EFFA04B742232600
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     399214
IP address blocks:        2602:803:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4b:55:ef:fa:04:b7:42:23:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b179c972-728c-4a96-b6d3-124a6ad787ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:55:8c:3e:5a:7d:b4:cf:80:a7:fd:74:7c:
                    f8:b5:45:41:e2:95:12:c0:7d:03:15:d5:4c:02:8b:
                    53:5b:a9:11:44:d0:f2:01:8b:13:4a:be:ee:18:b0:
                    5d:85:37:e3:58:fd:6a:80:b8:c8:6e:f8:31:a2:90:
                    c3:1f:52:95:15:20:2b:20:6f:93:af:f4:b9:a7:36:
                    5e:ff:1e:1f:67:c8:c8:b0:be:ec:16:a9:6b:c9:f3:
                    db:b5:39:6b:f6:1e:92:c0:be:22:0f:f1:d4:fb:5e:
                    7b:08:fb:d7:05:53:66:da:c5:41:72:25:86:59:f3:
                    b7:4b:90:35:a8:2e:c5:ff:17:07:45:2b:8c:00:bf:
                    db:0d:23:64:48:de:3d:bf:22:fb:60:a8:31:18:b9:
                    d0:4f:3e:8a:bd:4e:f0:bd:4d:8e:a6:1c:d9:d9:0d:
                    26:ad:f7:84:f7:c5:66:0e:52:59:8a:ac:57:0b:bd:
                    bb:aa:ff:a2:3d:d2:69:75:b1:25:96:69:a2:ac:03:
                    2a:d5:4a:61:d3:d3:a7:bd:e0:77:90:34:31:52:1c:
                    e5:f2:3a:94:12:a7:08:f6:da:cd:a3:bb:8e:86:02:
                    47:a4:8f:a3:c1:51:94:0e:c5:12:9a:45:ef:e1:4a:
                    3d:9c:2e:14:46:22:5d:ac:24:09:a5:d1:91:25:74:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:50:1C:33:6C:C8:F8:8C:C6:C2:E2:9C:6A:AA:54:79:E8:71:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:60:74:1c:71:7a:bb:f1:9d:17:c9:5b:c3:6e:aa:a1:1f:73:
         63:87:ad:3b:b5:20:32:84:3e:de:8c:c5:88:65:2a:ba:9f:7b:
         34:56:2a:08:9d:3e:ca:2d:f5:3f:98:f9:0b:30:81:35:71:3e:
         c2:59:60:5f:b8:b9:68:d5:c1:07:f3:90:38:fe:47:dd:a6:b1:
         b7:0e:90:4b:c0:00:e2:c3:08:5d:df:2b:8f:d9:af:6d:2e:96:
         c7:b5:a2:2b:57:4e:91:c2:52:a7:48:e8:a0:b9:ff:47:a6:df:
         ee:d3:22:6e:da:5e:58:7d:28:eb:4a:d7:ae:87:b0:72:9f:02:
         31:d6:47:bc:da:c1:f2:69:b6:cf:4d:ed:34:59:c0:8a:98:8d:
         b4:ce:99:58:e2:87:cf:b5:00:9b:b7:6b:9f:f5:93:13:99:0b:
         41:5c:19:67:6c:d7:d1:73:68:ee:cf:0b:8c:2e:6d:d0:74:6a:
         f6:76:5b:db:4e:f1:30:ad:fe:69:b1:d5:a1:61:78:e2:63:d9:
         45:4b:13:22:69:85:a3:ba:6b:f5:a0:1b:dd:0b:e0:1b:33:03:
         3a:97:98:d0:fe:51:54:77:98:da:e2:3b:46:4a:79:10:80:eb:
         38:59:bb:83:2f:20:e7:26:ea:30:80:e1:52:1e:c8:7b:ea:d0:
         94:1d:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:02:08 2025 by rpki-client