Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/a2dea053-001b-3bdf-98f6-9dbb8b4944b3.roa
File:                     a2dea053-001b-3bdf-98f6-9dbb8b4944b3.roa (raw, json)
Hash identifier:          bh1nt8ajHs9Nl635DAAWm5qbfAzNwLNKA2FIc4XzKLw=
Subject key identifier:   B2:28:BA:AB:94:15:3D:9A:ED:30:1C:9D:C4:0B:7A:7B:A2:4D:FA:11
Certificate issuer:       /CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
Certificate serial:       010D0C9F4328584A497070297D2736E6FEB29D90
Authority key identifier: 82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/a2dea053-001b-3bdf-98f6-9dbb8b4944b3.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     150698
IP address blocks:        2602:2f0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:70:29:7d:27:36:e6:fe:b2:9d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=749c2e6a-7187-40a9-b895-63d63ab59ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:49:ee:41:0d:3c:06:24:e0:16:fa:91:0d:
                    b0:05:6f:4a:13:a3:4c:4c:16:33:b4:47:88:0b:3c:
                    f3:b6:07:f1:a5:70:81:ca:e3:61:ad:1b:32:9b:1b:
                    72:a0:aa:2c:46:ab:7e:6b:55:ec:38:49:9b:ee:c4:
                    89:64:24:3e:48:71:da:25:45:d1:02:0e:2b:af:eb:
                    e1:02:f2:7d:48:6e:48:89:c4:83:10:d0:9a:22:1b:
                    88:8b:25:c5:84:80:b0:16:ed:f8:a0:6b:44:d1:c6:
                    89:8f:29:33:fb:0b:7f:41:de:a1:14:e6:1e:cf:27:
                    d7:cc:28:a4:e9:d7:69:24:44:99:ab:e5:99:98:29:
                    96:8d:15:6a:89:3a:0f:74:41:78:49:08:28:38:31:
                    c4:b4:bb:88:2b:85:da:7c:d8:5d:b1:fe:f2:b2:c0:
                    df:b0:8d:78:cb:1d:f4:01:6c:18:61:b4:d8:91:a1:
                    7e:28:9e:d3:d3:d2:0e:49:20:9b:3e:c1:28:12:80:
                    5e:f7:3e:51:4c:f2:76:99:45:8e:d2:2b:cd:77:77:
                    3b:be:14:8e:67:8c:7d:b8:47:82:3d:01:25:4e:dd:
                    27:5b:f7:ea:bc:e3:e1:c4:0e:0d:e1:b5:87:2e:a1:
                    74:d8:6e:9e:23:8e:d0:b6:a9:25:f1:06:71:ae:fd:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:BA:AB:94:15:3D:9A:ED:30:1C:9D:C4:0B:7A:7B:A2:4D:FA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/a2dea053-001b-3bdf-98f6-9dbb8b4944b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl

            X509v3 Authority Key Identifier:
                keyid:82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2f0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:95:87:85:64:ef:b1:8b:0f:57:b9:0e:c0:2d:4b:cf:d4:
         1d:e4:57:e3:e9:2a:57:a1:62:ef:ae:8a:61:45:26:f4:74:be:
         68:33:e9:03:ed:94:22:3d:97:73:59:0f:e8:96:bd:1d:d0:c4:
         09:db:dd:e8:12:b3:e6:d0:88:77:ab:9e:d8:22:08:13:24:fb:
         0d:f6:c1:4a:2e:db:19:f1:34:e8:0f:79:a1:48:0a:ba:56:10:
         d8:1a:3d:cf:c1:44:fd:61:67:11:44:85:9f:48:29:a1:ca:60:
         cc:9c:f2:3a:3d:61:51:55:92:f7:ff:ae:83:cc:97:99:da:b4:
         ba:85:dc:e0:d8:d2:ca:d0:b7:37:28:82:d7:74:40:3e:ba:8c:
         92:88:e6:44:81:bf:77:d6:3a:1a:47:b8:a9:fd:a4:aa:1c:91:
         7d:ac:6c:52:47:c9:99:f2:cc:97:c5:97:08:97:b3:f7:95:7e:
         64:d3:2b:10:2d:be:de:89:cd:a0:a7:39:46:e0:ee:94:1e:27:
         6f:09:77:c9:ca:a7:da:95:30:3f:61:90:80:74:12:cf:ff:92:
         d5:5a:8b:88:f1:24:23:ca:84:11:79:8c:91:d5:3b:16:6e:45:
         59:7a:50:41:70:1f:ab:21:f4:ee:16:0c:d5:00:ed:f9:11:ea:
         b2:b1:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:25 2025 by rpki-client