Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
File:                     59990428-91ee-3746-8405-ef5d22c38294.roa (raw, json)
Hash identifier:          xJsyVRZTtNldIHy2+mU7lEYb2auj47vsiDXsRedaPs8=
Subject key identifier:   8F:B0:97:08:37:4F:94:91:FF:E9:21:1B:DD:10:B4:8F:AE:A5:8C:85
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F4328584A49707E60A04A936035401C80
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     30201
IP address blocks:        2602:fcb5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:7e:60:a0:4a:93:60:35:40:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=88e243ee-7f6b-48bd-9a4b-fc5b6c971be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:37:98:8e:3d:32:6b:35:e6:23:78:42:d8:
                    a5:4d:43:7e:d8:74:2b:e4:d2:87:51:30:4a:1c:76:
                    1b:aa:b6:30:ea:cc:04:2f:9a:01:81:f1:af:4d:33:
                    56:db:66:cb:d7:fb:b1:2b:c1:fc:f1:db:a8:81:0a:
                    61:cb:d7:2b:5d:7c:1d:ca:ee:bb:77:cc:6f:6d:71:
                    94:17:c3:b5:3e:09:3d:45:eb:1b:0f:b9:f0:b9:8d:
                    3a:81:46:f9:64:6c:de:7f:7f:85:9b:13:c0:ce:e3:
                    98:4e:b5:2d:9f:0c:82:d5:e8:d6:24:e1:31:48:e2:
                    65:cc:d1:6c:76:4e:4a:0b:9d:8f:64:c1:f2:9b:a6:
                    c5:fe:c8:fe:e2:28:80:19:84:7b:97:09:17:b4:6d:
                    90:ee:06:7e:20:21:43:56:76:f0:9e:bb:3b:b2:ca:
                    4c:cb:96:93:07:43:ee:2e:a2:93:fe:14:37:24:a6:
                    a1:92:42:0e:86:da:e1:cb:5e:10:03:60:34:6e:3f:
                    93:49:78:b2:a3:5d:4d:d5:94:db:2d:e5:14:d2:c5:
                    a8:11:4c:78:d3:3c:66:a0:b9:ea:a9:44:db:16:ff:
                    c9:77:37:e5:d8:10:ac:9f:7d:dc:8d:20:a0:e2:eb:
                    08:a2:89:a5:e9:44:1d:da:14:6d:fd:81:d8:b5:9d:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B0:97:08:37:4F:94:91:FF:E9:21:1B:DD:10:B4:8F:AE:A5:8C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:61:1d:6a:d6:cc:82:b2:61:6f:34:6f:64:f7:d3:b7:47:
         83:56:44:ba:dc:39:87:c3:2f:bf:7a:6d:1b:7a:02:c4:dc:3b:
         09:cd:bc:4d:d9:6d:2a:c7:6e:26:33:01:6d:11:a8:53:36:c0:
         99:90:df:c4:c2:15:6e:2c:57:e3:f9:44:ec:c5:18:76:a4:21:
         cc:13:c4:8b:d9:95:e9:dd:0d:6f:f5:2b:a8:52:06:5d:8e:e5:
         b9:18:a8:c7:d0:14:a7:b0:53:07:14:0d:2e:e9:28:68:45:5d:
         31:c0:71:7c:65:02:78:61:c0:d1:7c:9a:a4:3c:87:55:20:42:
         b5:0e:82:96:dc:78:09:fc:f1:5d:82:8d:49:60:de:c7:a9:26:
         52:a4:67:c3:5d:a5:29:34:ed:46:02:9d:6b:56:31:2e:1b:01:
         e3:46:f0:5d:61:1c:f1:70:1d:5b:09:a8:ae:55:d3:47:15:21:
         b0:eb:0d:11:9e:10:19:6f:4d:b9:c0:72:cb:a0:91:fc:f4:d1:
         91:b4:e3:7a:da:f0:5b:c0:84:26:d5:49:b0:46:f2:8b:8a:e3:
         10:40:75:91:61:89:7b:f7:5e:a5:e6:bf:8d:4b:80:aa:b2:10:
         8a:0f:67:38:ec:bd:38:89:4b:e3:a7:7a:db:1e:33:08:3f:ca:
         e5:8c:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:11:48 2025 by rpki-client