Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa
File:                     05894b00-1ab7-3370-99a2-efa2acc65d9a.roa (raw, json)
Hash identifier:          VhLckJdOGeFhGvvc7RCRsLqzLQdeUvOAoAs2ilpCjkA=
Subject key identifier:   D6:E9:9D:E5:4E:A1:DD:46:98:7F:62:41:8C:6F:17:9F:66:C4:FE:25
Certificate issuer:       /CN=f488b7b9-ef6e-4097-9207-940bc62289f1
Certificate serial:       010D0C9F4328584A0C0565AFD631B87B4F3D4DC0
Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53889
IP address blocks:        2602:f984::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:65:af:d6:31:b8:7b:4f:3d:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=dc949ad3-0429-4f79-98fd-ac4e90e2a138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:ad:20:a5:aa:6f:b7:34:20:6e:02:3d:6d:
                    cc:1d:68:57:50:82:48:d2:48:38:78:0a:fa:fb:f0:
                    72:c6:6a:db:c2:4b:04:a9:c8:d0:58:33:16:65:b1:
                    a1:4e:1e:97:14:d3:7e:31:e9:12:26:f6:08:a0:fc:
                    62:63:fd:95:86:df:e9:4a:d5:fb:02:85:70:1a:8e:
                    1e:e1:96:f0:14:ca:79:bd:42:73:6b:13:29:a1:9c:
                    51:d8:18:54:1d:4e:41:80:9c:db:0d:c3:3c:66:41:
                    aa:69:80:fb:62:61:6a:57:ef:b6:45:a7:8d:72:05:
                    22:d0:d2:51:38:da:53:c7:4f:e5:db:fc:1f:e4:1c:
                    c6:5e:e9:bc:2c:63:17:2c:c0:f4:5b:53:f9:72:a4:
                    3c:d2:5c:1b:27:e7:eb:4e:c1:54:f1:e1:86:f1:d1:
                    5d:4b:9c:70:ee:88:a7:90:3d:e8:42:41:0e:ce:ea:
                    7d:6e:b8:e9:5e:72:0c:f9:d8:81:2d:40:a0:79:b2:
                    e7:7d:65:b2:7e:e2:09:00:cc:e7:f6:dd:06:16:6e:
                    78:bf:21:a0:5d:a0:4a:bf:44:14:7c:07:13:a0:84:
                    ef:aa:c2:3a:dd:c4:42:db:2a:dc:9d:51:48:e2:7a:
                    a7:4f:56:51:25:99:e8:3e:76:d9:8a:90:13:6c:1b:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E9:9D:E5:4E:A1:DD:46:98:7F:62:41:8C:6F:17:9F:66:C4:FE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f984::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:a4:72:fe:25:4d:8f:8a:ff:8c:1c:47:07:5d:83:e1:0b:
         ee:54:e8:a9:c0:dc:12:9c:50:ef:db:60:d0:03:6a:c9:10:2f:
         1f:6d:70:45:46:22:a3:45:84:77:7e:11:e4:7d:77:c7:7e:cd:
         4d:eb:a3:0a:5c:00:59:40:69:49:68:1a:25:7b:94:37:a2:25:
         46:45:4e:b6:18:78:8f:a7:f5:e9:2f:1e:cd:85:23:57:e7:b8:
         a9:74:b3:b3:26:d6:94:33:4d:b9:d2:7b:89:b9:a3:2c:d8:50:
         7c:c4:36:9a:24:ed:b6:8b:ba:f2:af:a9:9c:d3:51:cd:22:26:
         66:9c:f5:e6:55:7f:5e:d8:88:ca:46:f8:b3:a5:90:6a:72:60:
         26:91:24:65:3f:9a:b0:13:38:f9:61:c7:c6:b7:28:99:b8:91:
         c1:85:9a:43:cc:6b:94:96:80:48:e4:20:8c:f9:4d:6b:55:31:
         3b:ea:47:1b:6e:aa:33:ea:8f:82:3c:22:62:ae:1a:c4:e3:91:
         9e:fe:8e:b4:0e:2e:ae:16:b7:2e:f5:96:44:9d:79:c8:6b:35:
         aa:73:93:bf:aa:f7:07:cc:95:a9:c4:2f:95:41:c7:e9:43:de:
         15:06:bc:6a:46:20:76:16:d2:7b:e1:b6:21:bf:0f:00:50:7c:
         21:96:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:41 2025 by rpki-client