Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa
File:                     9201e658-e9ec-3b79-a087-999e44a81757.roa (raw, json)
Hash identifier:          s1rT0F1E1JtPZy8KzoUsIIy9qJT+KDivhW6ECMqenCw=
Subject key identifier:   C8:27:3C:1B:E1:FE:07:92:D5:5B:A8:7F:09:91:0C:7E:2A:27:C0:F5
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584A427581CE43EB1CFA3A682F00
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     32764
IP address blocks:        2602:f98b:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:81:ce:43:eb:1c:fa:3a:68:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=0b3a6ce8-2a04-44e5-9af8-398649af65b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:83:f9:3f:70:7a:82:79:f8:67:fe:07:89:
                    03:9e:30:ee:4d:4b:8c:23:4e:a1:66:e3:ee:ae:ca:
                    34:fd:92:3f:ee:e5:b0:da:c5:db:44:b2:8c:26:ab:
                    15:48:3b:57:f0:fe:16:7a:76:13:e1:26:21:5f:ff:
                    de:cb:9a:34:0d:d9:5b:ce:a1:86:70:56:b9:ff:b8:
                    f1:a0:7d:a3:df:95:dd:42:3b:a6:fb:76:24:ac:d0:
                    2c:b0:f4:ea:69:6b:a1:d0:3d:60:3f:ad:64:dc:28:
                    76:39:74:dc:21:27:3c:05:67:af:9b:d5:57:16:ac:
                    6d:80:07:55:a4:f8:b8:2d:54:bb:ea:a5:07:0d:c6:
                    16:6f:68:ae:f1:41:e5:10:d4:bf:f9:3a:ac:a3:61:
                    bf:7b:bc:c9:5a:ee:1e:44:6a:ea:eb:c6:fc:bd:4c:
                    a7:6b:78:ce:fa:ba:3a:e5:95:4b:1e:9f:fc:39:86:
                    15:70:71:0f:ac:8a:d9:4b:69:13:88:c7:2a:ae:02:
                    55:e6:59:75:1d:aa:07:e9:52:9c:34:ac:06:57:81:
                    e4:38:65:9e:1d:3c:1a:7b:99:4d:17:cb:52:41:ec:
                    36:d8:d2:a0:c7:0b:f8:2a:a5:8b:f4:11:49:d1:07:
                    37:c1:e5:60:a3:23:a8:40:84:f3:a5:c2:39:7b:1a:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:3C:1B:E1:FE:07:92:D5:5B:A8:7F:09:91:0C:7E:2A:27:C0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:e4:6c:ca:f7:30:37:10:41:d5:8c:6c:9b:9c:b5:83:8a:
         6c:a0:24:ea:b6:6d:f0:85:c6:a5:96:c5:5e:34:57:62:dd:98:
         34:7d:38:8a:37:a5:77:f2:5a:d2:74:ca:cc:65:5f:67:b4:a8:
         6a:12:12:86:f6:c4:4d:70:f4:4e:77:1c:c8:44:c1:b4:b8:15:
         13:c0:ae:8d:b3:71:cb:05:c1:6d:55:36:6a:10:9e:77:c6:62:
         62:58:ed:56:9a:56:64:23:d7:d7:f0:a9:0d:68:45:40:9f:0e:
         f5:1a:fb:a2:69:84:ed:0a:77:97:fc:ed:6b:71:e5:23:da:33:
         0f:e1:c0:35:bb:a4:d6:36:a7:49:ed:9a:60:db:9d:9d:21:12:
         f3:8d:91:8a:e8:23:4f:aa:58:b0:a2:a4:ed:0a:f6:b4:8f:20:
         8d:14:12:95:bf:f3:ff:8d:1f:1c:6f:ff:b7:46:19:bd:d6:aa:
         f8:b3:dc:14:66:a7:98:4f:60:a3:44:3f:c9:af:1a:e3:6b:a8:
         62:a3:47:b4:52:99:0b:1a:21:0e:e6:4c:79:2a:7f:68:eb:6a:
         d2:16:ed:c8:d0:b1:37:ad:74:6b:58:6c:81:4d:c4:8b:ec:16:
         2d:26:d9:b1:63:a5:f2:66:62:74:af:cc:99:a4:22:4d:57:60:
         63:77:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:12:52 2025 by rpki-client