Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
File:                     1c77d59f-76ab-3542-b115-de5343a440e7.roa (raw, json)
Hash identifier:          fBtvhYpbxDkJ8AybqRCwxogSVYYaUQrSSzlZcGNk5qY=
Subject key identifier:   B6:CC:98:3B:D3:F3:52:73:83:E7:9C:E1:00:B9:C7:0C:57:DC:1D:2F
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584A56004D69525CBBAFBD5E3780
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     4186
IP address blocks:        2620:0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4d:69:52:5c:bb:af:bd:5e:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=8072dd5e-1750-4f1e-a953-d4f0be826217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:05:cc:2c:b7:2b:d3:7c:6b:2d:d9:d0:a2:
                    07:a6:fd:69:96:de:17:95:33:45:16:67:95:30:b1:
                    f9:cb:4b:08:95:04:28:24:e0:65:94:6b:39:31:83:
                    b4:f6:f9:34:44:19:e8:ca:dc:3e:48:8c:12:20:f1:
                    b4:ba:04:81:e3:53:c4:93:77:3a:d7:60:bc:7a:40:
                    26:23:d7:71:00:a6:bd:9d:7e:41:fb:e6:14:95:17:
                    b5:fc:d8:d5:9a:d9:53:63:71:f8:a6:d5:38:13:b0:
                    dc:26:08:2b:05:3e:cb:d5:99:ac:a5:ac:fc:7b:a8:
                    61:64:75:a6:c3:16:27:27:2d:fc:b4:fa:0d:af:30:
                    ca:53:ab:bc:1c:ad:08:30:1f:b1:7c:d6:55:07:69:
                    f9:0c:75:e2:48:7f:87:19:65:8b:9d:a8:9b:59:b0:
                    e2:b9:ec:2a:fc:57:0e:76:44:83:07:01:e2:b4:c6:
                    96:b5:9d:4e:96:5b:b6:40:8a:08:c2:01:8f:7b:d6:
                    75:44:c4:77:4b:e8:46:11:eb:47:e3:fd:12:d8:c6:
                    15:a0:e2:c0:36:45:77:03:de:03:b9:ec:33:33:75:
                    8f:0c:b7:05:80:30:bb:bf:8c:09:e9:9e:6c:fd:06:
                    21:29:e1:04:a0:8a:d8:6a:7a:6a:05:22:fd:59:35:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CC:98:3B:D3:F3:52:73:83:E7:9C:E1:00:B9:C7:0C:57:DC:1D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/1c77d59f-76ab-3542-b115-de5343a440e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:af:32:2e:c6:e1:44:df:92:4d:9c:a6:b3:5d:40:ca:87:
         72:46:81:42:61:9e:fa:db:78:15:6f:6d:e0:21:ca:62:ce:ca:
         83:aa:5f:49:c3:62:fb:aa:35:1c:e7:73:3d:df:b1:a7:ea:3f:
         1a:ab:1c:33:a9:ef:44:f7:0f:09:49:9d:1d:56:5d:dc:ff:c1:
         cf:36:4d:a1:eb:6e:ab:4b:0c:e3:b9:02:e3:9a:8f:f1:e3:3f:
         03:15:e8:2c:4d:f3:1c:2b:36:53:50:48:4a:11:b8:45:5f:15:
         35:ee:4e:20:7f:be:8f:d1:c3:71:84:d3:38:c3:e4:f8:8f:d4:
         03:83:44:04:d2:7a:1d:84:24:41:7c:b4:b2:c9:fc:0a:0c:93:
         b6:55:65:0b:45:a8:87:a4:7f:08:50:35:c2:a4:ce:17:b4:d2:
         f5:5a:6f:dd:17:ae:d0:ab:b1:fd:40:58:2e:9a:79:a5:82:f4:
         5a:a7:c3:d8:a8:f5:0f:e3:ee:99:d3:7c:e2:43:04:49:49:a3:
         21:9d:43:4e:cf:b7:70:5d:84:68:38:50:61:7b:1a:6c:71:eb:
         b9:17:de:07:58:1f:8e:98:77:49:25:d6:94:a6:8b:bb:c7:61:
         83:ec:68:62:2d:45:71:6c:97:39:fe:88:2f:92:69:b8:6f:e6:
         cc:de:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:39:22 2025 by rpki-client