Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
File:                     8c677012-77d5-3579-a76a-b2ec649d5fec.roa (raw, json)
Hash identifier:          fmLumV5xldaM/Ge0p72U2Yljz2n6dretwgPa/WFSlSI=
Subject key identifier:   C3:14:F4:6D:28:67:D5:05:67:FA:F9:AE:47:8E:BB:8C:33:4C:41:F6
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584A331AF427035F213EB1ADBC60
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2602:fa28:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f4:27:03:5f:21:3e:b1:ad:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=419cf5ad-2303-4d2c-9a4d-c930bc03d699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:fa:f9:55:f1:ff:6b:92:af:7d:fd:2e:69:
                    1d:31:a6:3c:0c:9a:85:53:b4:a3:cd:da:bf:b7:18:
                    16:0d:26:79:22:97:49:68:06:50:37:f0:c5:f4:94:
                    90:23:1a:d4:fd:7f:a9:cb:27:18:5b:09:3e:14:d5:
                    ad:45:41:a5:62:48:79:80:38:be:36:0a:da:11:c5:
                    b2:da:60:cb:0d:1d:16:2f:a1:de:81:36:b0:22:f2:
                    e6:38:e1:9d:6c:e7:2f:c3:a9:a9:43:b6:7c:c5:28:
                    f9:3f:a0:17:f4:76:d8:01:98:8e:bf:50:50:2e:96:
                    b3:50:03:e1:8b:a4:fe:ae:de:9c:fe:e9:d2:3f:1d:
                    56:28:d6:f7:b2:fa:17:ef:6c:5a:f3:e6:fc:85:ab:
                    b4:6a:6f:69:4c:75:d2:55:3d:03:89:8d:29:13:07:
                    d8:2c:44:f6:70:49:4d:53:d2:a5:4b:21:f4:34:4b:
                    2a:62:e5:45:c8:9c:cb:78:21:7a:e8:b8:ca:9a:aa:
                    db:f2:34:51:d3:cc:d0:da:a3:e4:0a:68:92:d4:29:
                    ff:94:dd:b4:80:be:57:cf:43:fa:9c:fa:79:20:2b:
                    fd:19:70:d5:e9:2d:f2:ad:79:f5:2f:8d:b3:0a:7c:
                    27:b5:f2:34:df:b4:a6:87:ad:cf:3e:21:8f:b7:de:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:F4:6D:28:67:D5:05:67:FA:F9:AE:47:8E:BB:8C:33:4C:41:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:5b:b9:00:81:69:2e:47:07:1a:1e:31:99:54:30:e7:59:
         a1:c4:5c:56:c7:14:1e:83:35:ca:7d:c0:c9:6b:22:98:6b:81:
         90:f8:73:b2:ad:27:2a:29:0f:f1:69:7c:d5:4d:db:aa:a8:70:
         93:ef:8f:40:0a:1a:b0:53:3d:72:44:8a:b3:32:b7:46:a5:c6:
         4d:26:c1:0c:84:ee:66:df:e9:c8:97:76:39:9c:42:a9:a7:9e:
         cb:c8:d8:44:ff:27:3a:b1:df:0f:8c:08:27:81:92:dc:82:e2:
         de:c7:c2:7f:df:7a:fe:7f:e2:21:7b:39:31:26:10:38:16:df:
         83:75:c2:47:24:b6:fe:d1:71:05:99:bd:69:bd:5b:57:21:f1:
         ce:4d:31:9f:4d:c3:09:88:57:52:93:9a:77:fb:ef:58:81:ec:
         d5:3e:ff:94:a5:1b:2d:13:ff:9d:11:96:f3:04:93:eb:72:99:
         35:bb:3a:1e:d9:5c:29:76:27:d7:64:74:b0:3c:02:e8:28:21:
         34:ba:2b:72:4e:49:9d:25:d0:93:dd:fc:aa:5f:78:b4:f4:bb:
         dc:af:c9:62:33:5e:19:ef:2a:e1:25:fb:ab:2f:e8:77:36:67:
         61:d5:ae:cc:1c:9c:59:08:5e:db:0a:a1:5e:bb:c3:c6:81:7a:
         d5:cf:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:48:13 2025 by rpki-client