Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
File:                     2a2f4714-2c65-36d5-8951-275886c50180.roa (raw, json)
Hash identifier:          21Jl+Wsyo2C0MYNbyyBprNNvPDivqBdoIpB6fZPuJes=
Subject key identifier:   51:57:85:A4:F6:6E:17:49:55:CF:95:DE:B0:48:FF:AD:31:E0:0A:66
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F432858498FC9BF605EC6C9AD63EC5300
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     54981
IP address blocks:        2602:fa16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bf:60:5e:c6:c9:ad:63:ec:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=59b40e14-bfd6-4f78-95d6-20c70a656450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:44:1d:ea:cc:d9:fb:65:13:73:04:ab:53:
                    24:12:68:c3:9a:9d:5d:95:9f:28:79:bf:85:6f:ec:
                    a3:3d:24:14:a1:0a:8b:19:be:53:ab:96:60:e0:ec:
                    4f:27:19:20:6a:c2:b4:28:ad:af:cf:d5:0a:43:4c:
                    81:5d:66:be:9e:19:54:0f:af:db:65:6b:81:27:a9:
                    8a:71:47:04:c0:1e:dc:71:a2:f5:8e:00:fb:09:54:
                    a9:ad:24:80:e6:01:64:f2:f8:63:f0:e6:26:7d:54:
                    65:5a:e3:dc:c8:24:68:7c:7d:a0:ac:09:7a:13:b2:
                    58:6e:4b:93:cf:91:3c:0e:47:59:87:7b:95:35:c5:
                    eb:fb:46:ec:f6:92:55:5a:fe:13:50:2e:6c:db:61:
                    e5:cb:71:dc:99:d0:d9:e8:a9:6a:31:11:1c:96:18:
                    6c:5e:4e:21:b1:9d:a2:f8:6f:38:81:86:09:a6:86:
                    5b:90:4a:b4:05:2e:0c:43:64:1d:53:aa:8c:77:09:
                    f6:5c:29:95:50:15:21:c1:4b:3a:99:9d:aa:a7:68:
                    85:b8:a8:ac:72:28:5c:f6:a4:f5:76:06:ba:61:c2:
                    6f:22:76:73:71:ed:9f:e7:68:da:a4:bb:65:07:2b:
                    e3:ef:24:e4:f2:be:e2:51:c0:04:59:4d:1d:a1:ae:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:57:85:A4:F6:6E:17:49:55:CF:95:DE:B0:48:FF:AD:31:E0:0A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:19:6c:62:05:c9:bc:b7:53:05:21:59:c3:de:8d:3f:73:0d:
         54:09:d1:bf:a8:2f:bb:9a:13:3d:18:ed:63:e9:c2:c1:67:1e:
         81:cf:e7:ac:1f:c5:7f:2c:2e:c0:f1:19:17:6a:4c:3b:c9:ea:
         ec:7f:20:44:01:e8:06:63:05:a1:df:7c:b4:10:68:c7:c4:1e:
         0f:92:df:92:bb:12:b4:1e:d0:a9:b1:eb:60:a0:ff:4a:63:29:
         b7:07:87:0f:00:8b:04:a1:61:56:22:cc:58:37:40:5c:5c:3d:
         2f:5c:9c:47:87:ea:9b:54:24:3a:40:e5:d2:54:55:bb:51:1e:
         fd:c1:ea:60:1a:22:e3:0b:bc:4b:75:08:76:1f:7c:0c:69:42:
         b0:34:77:2d:fa:a1:af:54:34:14:34:5f:68:8f:ad:17:97:91:
         b0:a2:05:bf:bb:ca:c0:a0:c9:60:66:79:88:9a:70:0e:37:7e:
         ed:0f:3a:2a:01:41:02:5f:18:88:45:44:b1:c5:4e:18:ab:0d:
         ef:71:ca:5d:ca:a0:7c:7a:1a:12:16:b0:67:27:40:c7:8e:ae:
         be:a2:8a:52:fb:6c:b8:3b:9e:5b:57:9c:fa:a5:3f:ed:a0:fd:
         ab:d1:4b:57:c5:ac:bb:2e:56:61:24:e6:f6:49:29:d2:cb:d5:
         8b:94:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:52:43 2025 by rpki-client