Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/b595b89c-1b38-359a-af57-809a23d0047d.roa
File:                     b595b89c-1b38-359a-af57-809a23d0047d.roa (raw, json)
Hash identifier:          RGs85gjH6Yut78OgdeHvxQHyRoqTBLHjmfmERnKxTo4=
Subject key identifier:   2D:DE:85:3A:7F:2E:F7:8A:0C:65:72:6B:A1:C7:B9:79:B0:6B:B7:75
Certificate issuer:       /CN=d80ecca4-df87-49ed-896a-31c912ba8c98
Certificate serial:       010D0C9F43285849CBCF9927324622964373E880
Authority key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/b595b89c-1b38-359a-af57-809a23d0047d.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     26370
IP address blocks:        2602:fe68::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:99:27:32:46:22:96:43:73:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80ecca4-df87-49ed-896a-31c912ba8c98
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=586dea12-fe12-4b12-baf9-2e744d344cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:b1:96:0f:ee:a3:cc:2e:d4:0c:6f:be:dd:
                    54:52:c7:3f:0e:bf:4c:75:c0:3d:5d:76:53:eb:f3:
                    c2:5e:2d:31:5f:4f:d6:34:33:cc:f6:65:ee:15:ad:
                    f0:39:89:10:ea:bd:67:3f:1d:4a:b9:3d:cb:d1:1f:
                    e9:60:6d:42:52:0a:11:3a:76:2e:17:b0:0f:ed:27:
                    07:d0:4e:57:96:26:76:fd:43:41:87:b4:94:37:06:
                    af:92:e5:9c:f7:e4:0e:3a:96:a5:0c:22:25:c0:84:
                    dc:e2:b4:d8:b0:8c:9b:39:9b:8e:9f:b5:b5:81:1c:
                    1c:6c:4e:0e:30:ac:2c:5d:e9:f2:50:3e:30:2d:6b:
                    6e:1f:d0:f1:6c:4f:11:ff:da:e1:02:6b:dc:69:11:
                    5e:b5:e8:c6:ba:3b:95:62:fa:3e:b8:fd:85:f7:fb:
                    d4:5e:cf:50:0b:18:ac:db:47:ea:44:9e:d8:c2:51:
                    e7:62:f4:39:89:95:f6:06:37:9a:5b:b7:72:63:d6:
                    e2:98:56:eb:79:74:5d:6c:18:86:34:68:5f:fc:b9:
                    5a:25:ae:0e:18:81:be:52:3e:d5:17:a3:4b:f0:83:
                    54:89:91:f3:4b:4d:a6:60:14:22:7c:d2:e8:94:68:
                    ef:62:7a:17:34:6b:2b:14:86:da:2b:87:7e:28:ff:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:85:3A:7F:2E:F7:8A:0C:65:72:6B:A1:C7:B9:79:B0:6B:B7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/b595b89c-1b38-359a-af57-809a23d0047d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl

            X509v3 Authority Key Identifier:
                keyid:FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe68::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:67:2f:b2:79:64:9b:6e:74:52:51:39:36:48:c3:30:6c:
         e8:e5:91:ac:f3:ce:72:7d:b4:e0:7d:99:1c:f8:23:29:49:10:
         29:28:53:be:12:4d:46:7a:be:c3:2b:e4:36:c9:40:e8:bd:5f:
         db:14:a1:20:47:2f:7f:f1:5a:2f:cb:cf:a4:63:bc:8e:19:92:
         07:a2:3e:cd:1e:b0:ae:59:7b:ce:19:ad:e4:2c:62:fb:3d:6b:
         7b:17:a5:ee:a0:a3:6e:4c:37:d1:75:ca:21:d5:b7:1b:ae:73:
         3b:e6:88:02:52:37:aa:13:9e:38:5a:74:ab:35:2a:03:65:19:
         7a:fc:6b:ff:a8:5f:06:77:57:b7:8a:b9:2b:15:b0:6b:df:42:
         d1:a2:5b:c6:f1:32:cd:e2:b1:9e:af:e5:2c:0a:79:c3:d5:be:
         31:55:c0:91:97:c2:25:a0:e2:92:5f:f9:44:e3:4e:fa:56:31:
         e4:6f:68:e1:42:81:f7:7d:e5:fe:fc:22:1e:ea:91:4f:71:68:
         33:b1:09:7a:8f:c6:d0:0f:28:e0:f1:a6:f8:92:88:ef:a5:9e:
         de:9c:4d:88:75:84:a0:55:d9:af:2a:3b:2a:e9:46:f7:1b:f7:
         61:89:28:39:bb:ad:df:eb:87:28:cb:16:dd:24:6d:66:14:13:
         e4:0e:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:53 2025 by rpki-client