Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
File:                     159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa (raw, json)
Hash identifier:          nnjhvoFGtXXGY2cdwDmaolVbDqkR/rxIK3aQqdqyXps=
Subject key identifier:   5B:BC:FA:33:ED:4E:70:D8:85:C4:DC:C6:29:F4:CC:A3:96:99:DF:77
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584A560055C8C20C59B9DFFBED40
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401390
IP address blocks:        2602:f7da:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:55:c8:c2:0c:59:b9:df:fb:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=9e906e94-a70d-4f2b-8145-99ea6fa99bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:41:1f:0b:dd:58:7f:2a:57:1f:ed:60:7d:
                    a7:2b:7d:ba:c6:5b:ea:0d:2f:51:ff:74:67:4a:1d:
                    fa:b8:f8:fa:7c:37:ac:0b:ba:8d:a5:8c:a3:84:5b:
                    b2:6e:6d:68:d9:be:63:27:b8:fd:58:37:8f:3a:32:
                    21:07:66:78:1c:8e:52:c7:cd:d1:3b:39:88:44:07:
                    b1:9b:a1:a8:26:83:33:6d:0d:23:f7:4d:42:aa:8e:
                    2d:2d:43:5b:ea:d0:87:88:88:13:7a:5d:9d:ae:92:
                    6b:7d:be:63:f7:59:be:1f:6c:fb:9f:0c:c9:d7:fe:
                    8a:3a:81:ae:3a:d1:25:3c:a6:4a:5c:17:8e:fc:15:
                    f3:ef:80:88:1e:f6:75:a6:8f:fa:31:38:ff:94:4d:
                    d6:1c:51:d1:d9:7b:fc:92:67:f3:85:46:cd:a4:6d:
                    fa:50:6e:9d:88:90:f6:7f:75:df:23:d6:1e:d8:44:
                    14:5b:cb:4b:db:01:21:af:b7:16:83:ef:5d:79:19:
                    cd:b4:49:cf:22:b4:78:6d:c1:97:49:9f:9a:32:d1:
                    1f:a9:a4:31:0c:8e:90:a4:25:df:81:2b:31:34:4a:
                    6c:d2:1e:03:1b:ef:50:00:72:7e:94:c2:95:5a:df:
                    c7:85:33:bb:6c:29:f5:12:7c:79:95:1a:28:5b:4f:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:FA:33:ED:4E:70:D8:85:C4:DC:C6:29:F4:CC:A3:96:99:DF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/159ce2e2-439c-3ae6-bef5-1d2f7b464941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:71:c5:07:f4:41:85:cb:57:f9:86:37:8d:40:45:24:05:
         58:12:33:88:e7:d2:bc:c7:1b:40:91:fd:e7:62:7a:7e:9c:7d:
         69:de:e9:f8:16:ce:d0:41:f6:07:54:dd:3f:ce:7a:ba:f9:58:
         02:f3:93:4b:9b:ad:22:aa:27:d0:96:33:58:ee:b8:25:5e:f1:
         ae:eb:cd:d3:3a:14:6b:42:4e:c8:3c:7f:ad:6c:d6:3e:b1:fa:
         06:ae:6f:a0:28:9e:f1:05:c6:cd:17:4c:d5:b4:85:b5:95:d9:
         25:58:c8:bd:97:84:e7:f7:32:2d:bd:7a:d0:64:d5:d8:3f:a2:
         7d:04:4b:be:28:35:f2:a6:a9:ed:a8:4d:6d:ff:c7:e1:16:90:
         1b:b1:50:55:61:8f:6a:b7:2f:82:97:61:29:b8:73:71:73:d0:
         2a:68:0a:44:d9:a6:a8:8d:cf:5f:00:0a:54:95:58:c9:b0:63:
         e0:e0:01:7e:16:ed:61:a8:8f:81:3a:b0:7a:da:d5:39:68:e5:
         c9:aa:14:03:f7:07:03:fe:60:64:c2:6f:57:f9:31:29:b8:fc:
         70:54:ea:19:64:8e:08:a6:ea:2d:f5:5b:3b:90:e8:0c:e8:eb:
         b6:97:49:c8:b3:ac:66:3d:5e:d8:90:c1:ec:43:25:5b:bf:3e:
         d9:e4:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:26:36 2025 by rpki-client