Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/2f71fa2d-a2a8-3dd3-b1d9-53771098eeaf.roa
File:                     2f71fa2d-a2a8-3dd3-b1d9-53771098eeaf.roa (raw, json)
Hash identifier:          v5DMM6ql7ECdinK49bQsqGRn4DNsE6nPoIv6K0gS9rI=
Subject key identifier:   F4:22:98:3B:EB:31:05:AF:D6:99:47:36:68:8F:45:2C:3E:C0:70:D1
Certificate issuer:       /CN=b7707931-9764-48eb-9dbd-a40ef4165c1b
Certificate serial:       010D0C9F4328584A1E2AA88C0B56316DFC9AB100
Authority key identifier: 97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/2f71fa2d-a2a8-3dd3-b1d9-53771098eeaf.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     23389
IP address blocks:        2602:815:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a8:8c:0b:56:31:6d:fc:9a:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7707931-9764-48eb-9dbd-a40ef4165c1b
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=e5921072-fbc7-404b-a2c6-800376ba6daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:02:bd:af:27:a5:4d:b3:92:86:e6:88:95:
                    dd:00:7b:d9:04:07:12:84:95:9b:2a:e2:dc:ba:f5:
                    51:26:ff:f8:58:80:ec:00:5e:e2:86:cb:54:d9:e5:
                    2f:c8:99:e1:63:f6:46:36:fb:c8:47:4c:a8:dd:d7:
                    74:61:b1:f2:74:17:b0:ce:a5:be:cb:46:31:79:02:
                    61:f9:f5:b7:55:a7:41:7f:ee:cd:18:0b:80:91:88:
                    56:52:dc:f8:45:b7:57:ed:00:12:53:78:a4:3b:9e:
                    65:00:da:83:86:05:68:f6:da:cf:0d:3d:30:7e:3e:
                    d6:f5:ea:df:d8:23:ee:25:e3:dc:86:e7:78:49:0c:
                    74:93:46:94:50:a5:fd:68:88:15:53:10:01:d0:14:
                    e9:d2:60:c2:cc:98:d8:3b:9b:ac:d8:f9:7d:9e:47:
                    e2:88:46:1b:b1:af:d5:b8:ce:d3:8d:87:b9:c1:55:
                    d2:00:9b:97:8b:41:91:c0:fd:82:aa:a7:a1:f5:6a:
                    a0:85:0d:48:cf:2a:01:5e:00:04:10:85:27:27:95:
                    cc:e8:30:09:09:e8:98:c1:d9:a6:6b:e7:50:35:86:
                    04:af:23:f0:ac:9b:60:a8:b6:3f:3e:b6:9d:aa:75:
                    94:d0:43:52:34:ef:bd:63:b7:06:86:b7:ff:d3:40:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:22:98:3B:EB:31:05:AF:D6:99:47:36:68:8F:45:2C:3E:C0:70:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/2f71fa2d-a2a8-3dd3-b1d9-53771098eeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl

            X509v3 Authority Key Identifier:
                keyid:97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:8d:cc:5f:27:16:c5:6c:7b:90:02:09:94:32:b4:27:36:
         35:43:55:b4:ae:4f:e5:bc:77:d5:93:00:22:83:a3:54:dc:1a:
         96:72:bd:43:ca:64:13:45:9b:fa:33:e6:56:8c:c5:0c:ce:a7:
         14:e5:92:92:da:59:a8:6b:71:cc:aa:f1:9f:38:54:df:ab:1b:
         eb:49:3a:9a:57:42:a7:4a:15:91:7a:14:68:bc:ee:66:6c:bc:
         57:e3:35:a6:87:87:ba:d8:d9:d1:e5:63:18:81:5f:5d:69:01:
         42:32:4c:2a:2c:26:06:f2:d2:4a:01:6e:4b:a5:03:50:e8:ff:
         1c:9a:29:94:57:ee:b1:0d:a4:75:98:ce:5a:88:61:05:7e:4d:
         5c:f4:a7:71:cc:79:90:6d:12:40:d8:1e:5d:a5:71:96:68:fb:
         a2:21:49:10:4b:5f:f1:a6:46:d1:2f:ef:88:f5:44:d4:de:ac:
         ae:25:63:c6:39:5d:f2:c4:26:8b:20:58:fd:cd:c0:5f:a6:4a:
         fd:c3:6a:37:a9:ef:90:00:bb:40:09:a4:b2:f3:bd:74:f8:7c:
         b3:4d:60:18:75:5b:2b:bb:5c:69:87:53:a1:ac:12:0a:1d:6f:
         25:94:81:a5:cb:b5:50:ec:28:33:e5:c1:26:f4:c1:c4:ce:cb:
         1b:e1:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:15 2025 by rpki-client