Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
File:                     5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json)
Hash identifier:          izzzUgpIhIpyo4f0epURpTJbndzTxeUEXVAj/jUTsV4=
Subject key identifier:   CD:6A:1D:EC:03:A5:17:6C:3B:C4:CD:02:1C:1E:F4:5F:D9:65:B9:68
Certificate issuer:       /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
Certificate serial:       010D0C9F4328584A5335B55DA5EBD931B8AFEB80
Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     401612
IP address blocks:        2602:fb87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b5:5d:a5:eb:d9:31:b8:af:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=68488e6a-d09f-41a3-94e3-3f9b3d2bbd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:57:78:94:c6:ae:4b:6c:4a:5c:cc:8a:dd:
                    b8:c4:8b:fe:75:c2:4d:4d:0a:f3:f9:c8:79:fa:e9:
                    3b:4a:86:f2:39:d8:b1:95:c0:72:f3:b3:50:cc:bc:
                    0f:d9:ba:47:1b:ff:15:69:ea:4c:3a:3f:d0:97:5c:
                    59:88:d3:cc:b1:79:18:88:34:e7:90:ce:0d:75:5c:
                    c3:5d:a8:2d:6f:97:b6:9a:ac:07:c7:98:2d:4d:c0:
                    d9:fd:79:97:02:11:80:16:65:0d:86:c8:75:6c:47:
                    87:47:3c:84:e9:fe:12:4e:5b:56:91:a1:3a:d5:ce:
                    54:4c:a5:4f:dd:7b:85:66:ff:e3:fb:07:8e:8e:f0:
                    93:66:be:8f:8b:07:ec:e2:7e:37:5a:6c:e9:61:ae:
                    84:a6:5f:75:6e:4b:af:24:2c:38:6c:ed:bb:c1:75:
                    0a:65:13:d0:04:dd:1c:ec:15:6a:ac:a8:92:a9:c6:
                    3f:93:19:76:ab:33:0e:8c:8a:f5:06:b6:2b:3e:70:
                    05:69:f9:eb:14:b5:25:7b:94:2a:ab:b2:42:46:87:
                    8f:8c:80:0b:d9:4f:86:b7:fa:3f:4b:4e:ed:fa:6a:
                    3c:e1:bb:4b:0b:3a:c9:0d:8a:0e:eb:52:e4:b5:e3:
                    10:38:73:16:62:db:d7:d7:59:ba:68:ab:b9:e9:05:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:1D:EC:03:A5:17:6C:3B:C4:CD:02:1C:1E:F4:5F:D9:65:B9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl

            X509v3 Authority Key Identifier:
                keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb87::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:41:45:32:34:82:69:4a:c6:cf:ca:60:4d:56:0c:31:5b:
         ed:35:66:e1:a1:02:04:08:61:9e:34:2d:a3:02:58:7b:98:3f:
         d1:d4:c5:6b:25:7f:b7:10:97:a3:33:c9:b6:ac:9e:a6:f6:b3:
         20:d6:9d:f2:40:9f:e8:b4:6f:ab:d5:84:5f:c3:06:4f:c1:92:
         e8:01:48:ec:b9:1b:af:a4:68:f1:ca:c2:35:b9:bc:11:54:ba:
         e5:b0:27:c6:5d:ce:5b:64:98:d5:88:92:d1:07:a4:2f:5f:9e:
         28:ec:89:16:d1:62:81:38:19:f4:a3:42:29:c2:d6:6b:e7:b4:
         0c:3b:d8:fb:77:30:6b:ef:9e:76:34:aa:19:82:19:e4:8e:67:
         a8:4d:f3:87:57:6f:40:e5:b1:67:47:3a:ba:cc:95:d3:4b:f1:
         e5:61:bf:7b:e5:bf:6c:d8:9b:98:92:89:3e:42:25:4a:f1:96:
         4d:95:8c:63:22:8c:06:89:bb:8d:65:42:84:55:ec:5d:ef:fe:
         8d:d2:a2:78:6f:51:31:03:95:20:cd:f9:29:c9:91:0c:41:0f:
         7b:d1:ed:13:17:3c:c6:7d:d4:6c:c7:cc:d5:c9:46:e4:22:f4:
         15:a1:f6:78:0b:db:f5:2c:3e:0c:a3:3d:ff:db:84:60:12:23:
         e5:47:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:29:29 2025 by rpki-client