Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
File:                     9b7f43c6-1d60-387e-983f-5d6104c900dc.roa (raw, json)
Hash identifier:          +s87wGm10NGb07H2D4S0k4+hUVvW1PRCaxy1143KD9g=
Subject key identifier:   6F:E4:0C:B1:CE:ED:92:8E:9A:81:62:8A:39:A7:B7:C7:30:D4:C9:36
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F4328584A5A3074798A9D1E07FEC0F680
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     30006
IP address blocks:        2602:f7df::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:74:79:8a:9d:1e:07:fe:c0:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=cb4f2455-08a8-403b-93e1-f2a4d6bb856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:c0:4f:72:02:8a:97:c7:61:54:36:16:ae:
                    32:e6:c5:cd:4c:c1:60:d0:96:75:fb:87:32:08:5d:
                    d9:05:fd:a0:9a:48:e9:d3:75:cd:90:86:0d:6b:06:
                    35:e2:f8:55:45:63:62:9a:db:60:ef:29:d4:eb:9a:
                    67:9e:fa:41:4d:49:8c:83:20:cd:e2:a8:ee:a5:9e:
                    3b:37:fa:80:aa:08:44:36:83:06:2c:58:05:86:cb:
                    d0:d9:e3:e3:db:84:ad:31:69:70:16:f6:c5:0c:e8:
                    73:21:50:c4:71:ce:e8:bb:67:f1:1e:8b:ba:8f:d1:
                    d4:18:17:d9:1e:ab:67:ff:3c:ad:63:22:3e:40:ca:
                    be:92:b7:b1:9a:d4:48:e0:c3:0f:cf:bf:1f:da:ac:
                    0e:61:b3:65:2d:2e:ba:21:e0:34:c5:5f:5c:24:db:
                    0a:10:c8:b4:75:c4:7e:0a:58:61:27:4e:47:d0:e8:
                    dd:27:df:06:b3:46:9b:2d:9e:93:60:26:9f:49:09:
                    8c:ae:87:b8:58:1e:3b:c2:8f:ac:c7:f3:e2:16:93:
                    f7:36:23:1c:c1:06:2c:6e:1a:db:f7:2b:8a:46:9c:
                    2c:bf:56:86:63:59:14:ab:e7:fb:45:ea:60:6d:f1:
                    be:c1:6a:1d:3f:f8:87:9e:c4:c2:9d:1d:35:36:b7:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E4:0C:B1:CE:ED:92:8E:9A:81:62:8A:39:A7:B7:C7:30:D4:C9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:73:cf:fb:f5:8e:7d:82:28:27:33:ed:ed:49:3b:b3:5f:
         cd:63:68:87:ac:a5:37:15:05:71:77:d1:d3:30:74:ef:2e:44:
         6d:a9:3a:6b:82:82:bc:07:23:26:72:70:c9:19:6d:b3:51:0e:
         b4:11:96:f0:cb:3e:2d:e4:8f:02:e1:28:3f:a3:81:72:fd:b8:
         02:55:6d:98:1d:ce:29:e9:02:e4:e3:74:71:c0:27:e4:ca:67:
         b4:3a:96:40:63:91:3a:cc:07:d9:8a:af:12:93:d4:0e:2c:40:
         d1:c8:40:96:f6:3e:65:15:5b:62:11:79:13:35:66:2c:a7:e5:
         72:00:8f:90:8d:db:f9:ac:89:11:be:10:b0:f4:37:99:e7:b4:
         ed:39:b9:c5:4f:d3:f3:54:6a:43:dd:c3:1d:f6:58:8d:0a:1f:
         05:fc:5f:23:9d:9d:5b:38:74:c0:03:be:9c:31:1c:9d:24:b0:
         c5:aa:15:e2:37:5c:88:d9:94:d5:90:29:58:78:db:70:60:b3:
         bd:ef:ab:0b:9b:85:2b:1a:41:e6:27:03:20:2b:00:e6:eb:2e:
         04:ee:ce:e2:29:28:f5:b8:5e:30:eb:92:95:15:5f:21:5e:fb:
         4f:e4:42:6a:a7:cf:0c:41:66:5e:d1:4c:e3:7c:c6:4d:2c:71:
         d1:c8:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:20:23 2025 by rpki-client