Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/b837dfa5-4627-3d6d-b19b-bbf0b513ef12.roa
File:                     b837dfa5-4627-3d6d-b19b-bbf0b513ef12.roa (raw, json)
Hash identifier:          dNDHgz8vFhqGldSih4v450J450CYxC/hJ8S4GN/8UgM=
Subject key identifier:   EF:F6:C2:BE:E8:00:48:CF:3B:D3:62:7B:3A:AE:2C:41:94:9D:CF:00
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584A5765D4A740A4D4749D3008E0
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/b837dfa5-4627-3d6d-b19b-bbf0b513ef12.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2602:fc88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d4:a7:40:a4:d4:74:9d:30:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=ae5bbd29-519a-44af-9c85-b72d44b64f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:ad:0c:ad:74:1a:dd:a1:2a:3b:4a:2c:f7:
                    d4:5e:01:39:bc:e3:ba:7a:44:a1:6e:e2:ff:c1:6b:
                    22:6d:03:83:05:ba:4a:d3:d8:08:95:43:bf:2f:77:
                    ab:4c:7b:25:b1:73:11:a7:72:83:20:e8:6f:a4:f0:
                    13:3f:c2:d2:91:67:5b:dd:cf:ca:f1:b1:f7:66:74:
                    81:51:5d:36:3e:4a:1f:3b:2f:74:59:2b:aa:1e:b2:
                    79:42:23:e3:9d:05:dc:43:fe:fa:e3:5e:ae:6b:f6:
                    9d:dd:85:9c:c1:fa:2b:56:db:47:8d:de:c6:e9:ba:
                    72:0e:3f:06:ed:03:0e:d4:83:46:c4:6a:81:3c:a8:
                    95:df:b4:e9:12:8c:b4:3d:d6:2c:43:6e:3d:71:98:
                    1c:8f:ae:cc:e3:d1:76:f0:a4:91:80:e5:8c:ae:8e:
                    28:6c:ca:55:85:04:90:b6:df:8f:28:83:73:5d:57:
                    05:3c:86:58:ad:7b:7b:ae:f1:48:3b:56:03:70:a4:
                    ca:84:fd:b0:7a:1e:44:bb:d4:da:cb:b8:8c:91:ed:
                    59:1d:ea:bc:b9:97:19:c5:7e:d6:dc:60:e5:46:8d:
                    e1:ea:59:35:c4:68:49:ef:84:00:c2:21:8e:79:11:
                    2f:d1:f6:f0:c6:a8:71:57:8c:cd:d6:11:9b:de:12:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:C2:BE:E8:00:48:CF:3B:D3:62:7B:3A:AE:2C:41:94:9D:CF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/b837dfa5-4627-3d6d-b19b-bbf0b513ef12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:43:2c:b7:75:1d:a6:c6:b3:67:b7:d4:0d:0e:4d:af:03:
         be:57:51:a2:e0:42:19:bd:b4:ca:2b:7d:f4:20:53:31:d8:76:
         c3:2a:f6:cc:60:1c:ce:a4:82:e6:81:8d:1c:58:ec:78:9a:7b:
         d5:35:95:24:2d:ab:94:20:06:d0:c7:bc:d9:17:16:2c:44:26:
         d8:0d:a7:6d:a5:a6:34:62:78:41:6f:90:c6:d3:d9:d8:6e:7c:
         14:68:e8:dc:ca:41:33:bd:d1:8d:f6:27:91:9c:b3:43:38:0c:
         66:50:d0:9a:56:9e:c5:45:01:93:ba:0a:08:77:1b:61:be:67:
         ec:be:c4:15:de:eb:f8:2f:bb:08:da:1c:e9:11:ad:80:24:0f:
         ab:6d:63:aa:c4:86:39:e7:c8:e3:66:dd:a1:4a:3f:02:9a:49:
         d2:ae:80:77:38:8b:71:7f:85:c4:82:3f:54:38:9e:5e:1b:f3:
         dc:7b:40:e6:a9:8d:66:fe:0d:9c:6f:6d:29:d5:c2:69:0c:ec:
         69:18:39:08:dc:db:47:f1:1a:f6:80:17:e2:ff:d2:26:69:ed:
         6b:b1:b6:e5:9d:f3:a2:72:31:3f:14:73:dc:28:13:7f:99:d1:
         b0:d9:65:46:ad:a3:50:34:f8:1d:5d:f2:c0:7f:35:3c:68:1a:
         c2:2f:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:34 2025 by rpki-client