Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa
File:                     d197037e-e6e5-386e-b24f-099a3a5cd215.roa (raw, json)
Hash identifier:          u5kxOddoBSmh7xRYYDg6rS0V5R92YQRvSiGis18D2dM=
Subject key identifier:   BB:B3:A9:88:C7:0A:70:37:6E:06:48:B0:0F:A2:FA:6B:F8:62:A3:BF
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584A305033CF2ED148017A44C1C0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        2602:fdeb:15::/48 maxlen: 48
                          2602:fdeb:16::/48 maxlen: 48
                          2602:fdeb:17::/48 maxlen: 48
                          2602:fdeb:18::/48 maxlen: 48
                          2602:fdeb:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:33:cf:2e:d1:48:01:7a:44:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=fdbbbf04-d90c-4744-a0dd-99812533b152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:ff:bc:2e:48:e0:e9:38:18:4d:9c:20:7a:
                    e5:e5:9e:ce:b9:91:ea:7c:46:ea:d0:2e:e3:ed:9e:
                    40:b9:b2:68:97:82:11:2d:6d:2a:dc:8c:1f:6e:bf:
                    68:cf:fb:5a:b2:6a:a3:0c:6b:a2:b9:66:68:5f:80:
                    33:56:e5:a6:4f:60:5a:5f:1c:71:56:f9:cb:54:8d:
                    8c:70:15:c2:ec:37:10:1a:98:2d:6b:50:4d:ec:b2:
                    b3:dc:c3:05:6d:36:e5:34:85:7c:fc:f1:70:2e:24:
                    3f:bd:65:5a:df:fe:bb:ec:66:e4:c4:de:4c:d1:68:
                    1c:98:74:23:bc:cb:b5:a8:52:bd:7c:78:61:8a:18:
                    d1:68:7d:93:53:7f:77:9b:2a:04:62:29:0e:4f:69:
                    29:3f:b7:1f:55:e3:c5:4d:1d:d8:5b:ce:f3:f2:c7:
                    3a:18:33:05:67:09:52:f7:e0:9f:cf:74:7f:52:0b:
                    9c:17:2a:d5:cd:a8:4c:e2:02:e8:bd:00:a6:3a:2b:
                    24:cc:ad:ee:e1:26:ed:46:93:15:76:c9:af:7f:ab:
                    c0:b2:e3:89:ed:ec:cc:1d:b9:67:e3:7b:11:7a:d8:
                    ac:94:9b:6d:7d:6b:10:c2:36:5f:07:8e:57:c3:ce:
                    fc:de:d0:fc:f2:e9:af:dc:99:0c:74:b6:dd:33:9e:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:A9:88:C7:0A:70:37:6E:06:48:B0:0F:A2:FA:6B:F8:62:A3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:15::-2602:fdeb:19:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:64:ff:0d:39:a6:be:0d:58:0e:f4:de:e4:c7:ca:23:7d:
         c7:52:49:a3:7e:e1:62:41:cd:2f:ee:e6:1e:26:0f:d0:a6:9f:
         a7:2c:50:ec:ab:14:f5:05:9c:36:a3:27:1b:fa:12:2a:f0:cd:
         ad:39:85:74:50:58:e6:39:1c:b0:93:81:a6:c5:5b:6a:50:d5:
         cf:74:a4:20:c9:99:87:dd:39:d6:c5:33:f0:d8:86:0d:2d:8a:
         45:3c:78:6d:e6:88:1f:42:58:3f:cd:cf:28:e5:7e:52:1e:5c:
         01:75:96:63:7a:26:de:50:8f:2c:9e:5a:5f:76:9c:6f:cd:6a:
         86:16:52:8f:23:94:69:02:72:4f:d8:82:47:87:4e:a4:57:61:
         0e:80:79:5f:63:c5:88:d7:d5:88:82:be:ff:ba:6e:6b:5c:89:
         63:12:64:ce:03:e8:b1:73:44:79:1d:d4:9d:71:ff:d9:8a:bd:
         86:ce:e1:53:05:1d:62:94:17:c2:c9:d5:59:5d:7e:22:91:55:
         46:37:60:30:66:fd:c6:b9:40:0b:32:b2:8f:98:c4:24:41:cf:
         bc:9f:b3:2a:d7:f4:3f:71:d2:ec:ba:fe:a8:7f:5c:b6:5a:73:
         55:28:c5:f1:de:f6:8e:3a:c5:66:6f:63:73:d7:3a:37:89:82:
         a9:0d:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:28:48 2025 by rpki-client