Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/ac6be765-3c41-3255-85e6-0f96eea26d88.roa
File:                     ac6be765-3c41-3255-85e6-0f96eea26d88.roa (raw, json)
Hash identifier:          3XS7U2EWOMok6uIcHi4ceGKWXqUh9Ubf5zyzL9+APJA=
Subject key identifier:   A4:33:51:E4:B4:8D:25:F2:6B:F1:E5:F1:98:78:A5:6A:B9:7A:18:FF
Certificate issuer:       /CN=bac49063-78ed-4cca-a152-73b0c601c1bb
Certificate serial:       010D0C9F4328584A03A54974F1F75F3F5603A480
Authority key identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/ac6be765-3c41-3255-85e6-0f96eea26d88.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     54058
IP address blocks:        2602:260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:49:74:f1:f7:5f:3f:56:03:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac49063-78ed-4cca-a152-73b0c601c1bb
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=c8b737bf-1f7b-49bd-b7e4-defb4d40b8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:a3:ec:d9:3e:6d:f1:60:7e:62:79:a4:8a:
                    1d:01:6c:de:3f:fa:52:71:ec:80:0d:95:e4:3c:2b:
                    3d:f9:43:17:3d:cf:7e:9b:55:86:ba:c7:5d:d8:96:
                    2a:96:3b:0e:63:4f:fe:4d:05:ae:74:6b:82:70:2f:
                    58:d4:6d:13:db:f1:62:05:f4:7d:e6:02:0a:59:9f:
                    1d:93:7f:1f:2e:c8:22:43:1d:cb:bb:f7:0e:2f:a0:
                    ec:57:85:c4:69:a3:18:6e:61:c9:4b:f4:46:0d:26:
                    a6:46:ba:90:4c:f1:15:b9:34:f5:60:d9:57:79:2a:
                    9f:96:93:5f:ef:21:5b:99:17:87:cc:0d:47:28:65:
                    dd:85:15:8d:e8:f0:17:d3:d1:60:21:ee:39:d3:2f:
                    1e:d0:0c:63:10:12:e2:c6:b3:49:f7:78:0f:44:75:
                    48:7a:0f:83:f3:2d:25:92:1a:3c:9c:f7:aa:23:53:
                    9e:1a:2a:ec:f8:ef:33:5c:c7:0c:87:28:c7:65:15:
                    03:e5:fe:ce:d4:c4:02:18:13:31:f0:93:e6:0f:75:
                    3c:10:52:43:d6:24:6a:bc:fb:65:a4:2e:de:3a:a3:
                    4b:82:10:e9:7b:70:03:46:94:4a:65:06:0b:75:d0:
                    72:10:23:b5:f4:93:7c:72:fa:dc:26:c8:03:93:e2:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:51:E4:B4:8D:25:F2:6B:F1:E5:F1:98:78:A5:6A:B9:7A:18:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/ac6be765-3c41-3255-85e6-0f96eea26d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl

            X509v3 Authority Key Identifier:
                keyid:B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:260::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:43:21:ab:d9:a2:e6:c7:be:97:eb:80:e3:f1:f6:46:ee:
         51:2c:5c:c6:70:f9:6a:cb:8f:b7:61:ce:4b:ff:c7:29:a0:25:
         8a:9f:81:fa:11:b6:c3:47:ad:e8:f7:3a:41:bd:22:99:e8:a8:
         0b:04:49:2e:c5:44:c7:d0:63:01:53:ec:64:96:80:fc:5c:1f:
         17:06:8f:78:67:0a:d0:45:fb:fb:48:3a:9a:95:b1:5d:33:ec:
         d0:68:dc:3d:b2:07:99:2b:32:9e:40:29:a3:34:43:30:c6:a0:
         da:65:e7:61:0a:cf:45:da:88:c1:18:a6:e1:d1:13:b7:6d:fa:
         46:ff:8c:48:3c:60:16:bc:01:d4:b1:1a:e4:c4:bd:dc:41:1c:
         8d:60:1f:ee:ef:2f:54:fe:26:51:58:ef:8a:4c:6f:46:67:22:
         a6:28:3e:d1:c4:3a:7a:68:b4:ce:88:01:3c:84:b5:bd:df:d4:
         3c:4a:02:24:d9:85:b7:d6:12:8b:76:be:ee:a0:f7:6c:ac:d5:
         2f:45:f1:c7:67:8c:4e:a5:ed:bc:33:99:d5:e9:93:4e:3f:e8:
         de:15:ed:30:e9:11:de:f3:62:55:18:82:f3:3c:a5:79:17:9c:
         2c:29:56:df:4f:39:56:9c:ef:0e:cf:52:f1:32:ad:d6:3a:b0:
         73:3c:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:25:47 2025 by rpki-client