Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa
File:                     24c13717-d7c5-31b8-9e36-c034a159e7c1.roa (raw, json)
Hash identifier:          2qXSG5aqJPd/3M+uNsZ8Bq7P4I491aBuD5rBDr4YNlM=
Subject key identifier:   96:1A:30:E7:56:D7:1B:EA:7B:07:AC:BC:43:EA:D8:E9:EC:3C:9A:70
Certificate issuer:       /CN=e93b687e-96ad-4930-acf8-896c92d40eff
Certificate serial:       010D0C9F4328584A5335A054650E03B52848CAD0
Authority key identifier: C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     211548
IP address blocks:        2602:facc:ff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a0:54:65:0e:03:b5:28:48:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93b687e-96ad-4930-acf8-896c92d40eff
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=699adb85-793f-48e9-9fba-3f861603fad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:5a:25:23:43:0f:ed:06:70:b2:68:b1:92:
                    75:14:e4:c7:c1:de:15:23:49:5c:47:ee:4d:d3:01:
                    70:d4:2c:82:41:6e:1a:f5:ed:7b:0a:a0:85:4c:7b:
                    03:73:03:de:fb:6d:97:18:d9:a4:eb:a8:5f:26:c5:
                    ce:59:2b:a4:fb:ad:32:e7:b3:48:7a:7b:aa:77:c6:
                    d5:09:09:f0:35:71:f3:6a:a8:b0:2b:fd:d1:03:d8:
                    b0:96:57:9e:1a:41:3c:b4:59:a5:79:9d:9e:ad:f6:
                    b4:98:e0:fb:9d:ff:39:ee:2e:ad:d7:95:64:33:64:
                    67:dd:ef:1f:45:6e:32:de:9c:4a:38:3d:4a:57:f1:
                    a8:a0:9f:99:3e:5a:b6:4a:b9:af:cc:31:c8:90:6d:
                    1c:fd:ae:b9:cb:c3:e5:9a:51:9b:a9:77:ba:61:1d:
                    fd:0e:39:f0:b7:d8:60:77:e3:06:93:5c:ce:d6:02:
                    32:d1:b8:17:40:60:ce:44:fe:69:f5:b9:66:51:15:
                    38:0a:9c:f1:8c:0e:32:51:12:9d:65:40:a8:75:eb:
                    3d:c2:87:b4:aa:4b:7a:1c:7b:17:30:9e:96:f3:96:
                    3e:f8:16:0f:99:de:6f:c9:dd:85:b6:22:c6:2f:26:
                    ba:fd:71:ca:64:f9:93:0f:23:a7:bd:7a:47:b1:05:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:30:E7:56:D7:1B:EA:7B:07:AC:BC:43:EA:D8:E9:EC:3C:9A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl

            X509v3 Authority Key Identifier:
                keyid:C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:facc:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:c8:fc:bd:ad:8c:7b:c9:74:03:f8:af:07:c7:33:cb:01:
         7f:ee:99:95:f5:ae:cd:c4:17:c5:7b:d9:9f:64:dd:39:cf:44:
         9d:7c:fa:8d:ea:f3:40:2c:f8:24:a9:7b:b4:6f:e5:34:40:be:
         13:14:fa:14:e3:33:df:0f:68:2b:27:ec:7e:be:83:e3:29:04:
         48:12:60:89:73:a0:4e:2f:4e:a2:d3:3f:ff:d1:65:d6:97:18:
         a5:32:27:6d:bd:ed:0c:f9:87:d1:e8:e2:06:ef:c1:c1:01:4c:
         da:69:69:54:1e:59:0e:6c:c9:d1:a0:3c:b0:f0:da:e7:4d:ac:
         13:f9:d7:fb:50:29:16:20:2a:e5:df:d0:cd:97:8b:25:81:34:
         71:1b:33:0f:e1:9d:16:f1:03:8d:b7:0a:bc:a8:99:9c:2f:4b:
         60:94:18:79:d8:a6:86:f6:33:f1:8a:52:ae:f7:70:64:57:8e:
         ce:c7:d3:fc:c2:56:c8:b8:b9:89:92:43:7d:67:a1:74:93:86:
         9e:e4:ff:43:f4:08:2c:de:f8:18:41:8a:c0:21:a5:b2:f7:b9:
         18:5f:06:c1:e7:71:2d:84:ac:dd:aa:75:76:ba:e6:40:b8:c6:
         9c:b6:a0:87:4f:f5:63:65:be:52:8a:65:eb:67:66:cb:54:a9:
         14:5c:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:16 2025 by rpki-client