Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
File:                     fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa (raw, json)
Hash identifier:          CkidFMXrvaBGcTqcceVaZhdOsKZoYn6Ski9sjNCbjBM=
Subject key identifier:   BE:57:90:31:46:AC:FB:A4:8E:82:06:98:53:03:37:F3:9B:9F:08:3E
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584A4C3B03B394154C235993A580
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     394106
IP address blocks:        2602:f6a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:03:b3:94:15:4c:23:59:93:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=54bfd471-7a26-4e99-9ede-49b417d8affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:38:13:a2:1c:b6:30:f2:2c:e5:f1:22:2f:
                    7b:e7:fa:a7:0b:36:a6:aa:ac:c2:2c:16:2a:67:ad:
                    67:71:ba:c2:e8:ff:54:18:ce:e2:85:f8:28:c3:f5:
                    43:b2:1a:a5:6a:12:67:b8:a5:84:48:b6:3b:d8:53:
                    7a:e0:14:67:72:9a:ff:d7:d7:c6:03:17:ac:05:99:
                    b1:ed:a6:79:bb:f4:78:6d:db:1b:1f:a5:15:31:ec:
                    0c:ae:bd:8d:e5:a1:aa:1a:7b:32:1c:5b:d4:af:c1:
                    4f:a2:5a:bb:e1:00:29:c0:db:7c:c5:7f:04:ac:1b:
                    c4:77:21:cc:e7:9b:ad:0e:a3:0d:4d:b0:83:4b:ae:
                    c7:84:65:28:b1:2e:8d:61:cd:7c:62:5d:75:99:56:
                    6a:26:af:79:49:71:d7:0c:2c:b2:97:8e:01:ec:89:
                    69:a6:02:98:ef:02:50:80:a7:a3:b6:96:53:ae:bd:
                    48:d4:e9:bb:1b:02:47:7a:82:d9:c6:69:eb:26:aa:
                    28:27:65:1a:2b:cc:dc:42:fb:b5:f9:96:cb:01:56:
                    48:e8:6b:78:64:e3:fa:ad:35:c0:de:21:b3:ab:ee:
                    29:26:80:6a:a1:f2:67:12:2d:fa:4a:40:30:20:5e:
                    f1:55:87:ba:c6:98:ac:30:59:ff:93:b3:d9:93:b9:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:90:31:46:AC:FB:A4:8E:82:06:98:53:03:37:F3:9B:9F:08:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:92:f1:87:cf:ae:95:1e:9f:2e:75:8b:83:9d:f4:4d:f6:4c:
         f0:ff:c2:fa:64:ce:fe:56:ea:2a:55:0f:63:f7:63:83:34:10:
         8b:70:69:e4:11:54:87:73:ac:c4:bf:6a:d4:dd:ea:7b:b1:b4:
         26:1a:c8:4f:13:aa:52:02:13:ac:c3:d7:12:ec:77:b6:37:34:
         ef:00:53:17:c9:6a:b4:f6:ff:b7:c5:98:bc:8d:75:a9:36:d9:
         b6:8b:51:58:cf:99:de:36:05:08:9a:55:18:5a:66:81:b8:87:
         09:40:68:6a:e1:9f:26:91:8a:b1:f1:79:d4:52:a4:dc:41:7f:
         74:db:fa:fe:48:a0:93:f6:0d:c8:83:37:38:ea:4a:13:c2:2b:
         19:3a:1c:3d:0b:d1:ec:d9:28:2a:bf:b7:48:e8:ef:9f:65:2c:
         5c:05:6c:d7:76:3a:7d:b3:9b:3b:78:5f:95:66:51:8d:09:bb:
         f2:15:0c:ab:ef:57:0c:98:46:cd:da:36:df:53:5e:23:bf:e7:
         6c:a4:31:2c:49:2e:20:59:06:6a:cb:8e:45:c9:b2:a8:cb:2e:
         e2:f7:9a:76:ac:cd:ca:21:c2:3c:d0:b4:0f:21:8b:de:72:8e:
         9b:14:6e:02:ec:7b:67:51:78:f1:7c:59:6e:61:dc:9d:fb:bf:
         67:5d:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:04:47 2025 by rpki-client