Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa
File:                     d33aeeb6-baad-3355-9b05-6facf6fac70d.roa (raw, json)
Hash identifier:          9YJlShHykAMubKsRvL0NamcLG9TySyK1RLhdnoLTAKk=
Subject key identifier:   C4:C2:9F:AB:4A:59:4E:F9:21:C1:A8:F1:A4:89:50:44:49:0B:E2:9B
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584A5600561DE0E81AC487863E60
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401390
IP address blocks:        2602:f7da:37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:56:1d:e0:e8:1a:c4:87:86:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=692822ef-55fc-4f93-bf19-45899819394d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:8d:66:78:77:d2:95:d6:5c:3f:82:a8:91:
                    e2:b8:9c:1a:e2:63:5b:c8:4a:58:71:54:ec:fb:d7:
                    3b:26:da:d4:c9:39:18:c7:20:d6:96:70:07:8f:a2:
                    6b:e5:13:44:57:3e:b9:30:ad:cb:4d:a0:42:e5:cc:
                    eb:2f:c9:49:9d:6b:e7:e5:e7:74:63:41:95:69:91:
                    a2:70:6a:e3:d0:5f:68:6b:f4:ed:51:90:e1:98:0e:
                    c0:7b:48:57:66:a1:1a:cf:65:26:e2:0c:c7:c5:98:
                    5e:e1:4e:64:16:ce:6d:85:0c:ba:1d:d1:62:89:61:
                    48:d1:13:2e:82:18:f5:97:7d:ca:12:99:e8:4e:55:
                    57:02:1a:42:66:70:9d:eb:c8:fd:0c:28:80:2d:3c:
                    65:0f:fa:89:69:19:f6:27:97:bc:5d:29:b5:bf:be:
                    19:b1:2e:9f:71:a8:21:a4:8c:e0:44:be:7d:64:32:
                    0f:ff:49:1b:c1:a0:1f:a6:1c:8c:ae:ad:d5:ab:cb:
                    16:eb:88:65:f3:e4:bf:6b:9d:82:8a:5c:ad:c5:66:
                    88:4e:fb:1c:ee:bd:0f:62:fc:a8:2e:6d:01:d4:b4:
                    8d:76:ae:a2:c1:b7:38:8e:7a:22:f5:f9:f2:57:6b:
                    34:f9:1e:34:6f:02:f1:db:23:51:70:b9:eb:ab:13:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:9F:AB:4A:59:4E:F9:21:C1:A8:F1:A4:89:50:44:49:0B:E2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:81:4a:33:59:9b:f2:05:d0:e8:ac:7a:20:9e:e9:96:35:2a:
         f7:db:cd:e3:0a:a4:a2:c4:e7:92:53:a5:27:fe:ef:bd:22:3f:
         80:b6:c9:7c:7a:d8:f6:bf:4c:7c:49:c7:94:e9:49:8f:9c:64:
         fd:ba:82:63:43:46:1a:5f:21:b8:18:7e:c4:68:99:38:fc:b0:
         2b:f2:56:0f:cc:ef:b9:2b:ea:e2:50:d1:3f:a0:66:07:e7:e0:
         2d:84:53:30:51:5d:a7:ec:7f:56:11:f6:bd:bf:90:2a:a6:da:
         e2:d3:e3:42:89:5d:3a:9c:ca:46:fb:29:90:33:e8:b3:ff:48:
         eb:c2:e0:2e:c2:77:2d:f4:7f:cb:e4:42:0f:f0:40:b8:01:cb:
         0d:7b:9c:bd:3f:07:ad:c7:37:f7:a9:31:f7:5b:61:48:0d:31:
         da:02:56:78:2d:6a:11:d6:9e:72:ed:27:81:ee:d5:0b:49:21:
         09:70:5e:4d:da:4c:1f:eb:2b:14:e2:7d:0b:78:dc:10:db:5c:
         22:d5:c3:92:50:21:f7:11:17:0e:f9:f2:d9:4f:51:42:a1:df:
         94:5d:a0:8b:9e:a0:38:fd:cb:11:0e:e3:eb:3f:cb:4f:c8:e9:
         1c:67:a5:36:51:fc:9e:93:54:cd:54:62:48:fc:35:46:34:73:
         c1:11:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:36:12 2025 by rpki-client