Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa
File:                     02030b63-2c8a-39dc-b173-931ab6a148c4.roa (raw, json)
Hash identifier:          Bvoh6t4xg5ebcMSy09pML2/Jt/216Zf1fokCbdFnU1Y=
Subject key identifier:   70:62:4D:CA:DF:B0:4C:0C:3B:BF:5E:44:91:57:87:56:74:6A:85:37
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285849BF3F656FD1367F1C431E4400
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     38047
IP address blocks:        2602:f83b:1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:65:6f:d1:36:7f:1c:43:1e:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=ab5f445b-3469-40f7-8c46-11cd27240fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:0b:f7:1d:c7:e9:8a:df:a6:ef:ed:07:ee:
                    ef:86:eb:d6:77:62:50:19:eb:b6:6b:75:32:5c:8c:
                    29:8d:bc:a5:cd:3c:15:5f:6a:54:df:89:d8:2f:7c:
                    d5:b2:54:f7:ce:ac:be:e6:0c:49:5e:6c:cd:44:34:
                    e8:d6:b3:49:b5:79:5c:45:2d:89:1a:2f:97:48:21:
                    f0:59:a3:11:01:cf:f7:37:a6:ef:d8:92:1d:ce:38:
                    bd:72:6f:4a:62:e8:89:98:1f:81:40:97:78:8c:3d:
                    e9:d5:02:9a:d4:14:f7:51:3d:d3:9c:03:be:60:c3:
                    63:45:d7:94:59:2f:5a:74:68:5c:04:1d:e1:98:2f:
                    65:d0:a0:b8:25:fe:df:ce:97:7c:82:1c:16:bc:0e:
                    24:d0:c3:79:cf:bf:11:92:88:cb:70:17:d1:f9:91:
                    18:7b:8c:7c:8d:71:75:53:17:eb:bb:e2:61:64:8c:
                    2b:80:25:09:a8:8c:d1:5c:88:9d:ac:4d:1d:bc:1b:
                    27:ca:0c:dc:98:57:f1:7d:42:53:f3:9e:82:01:21:
                    58:78:7c:b3:d0:e8:de:bf:28:e7:d6:a6:43:ac:3c:
                    03:74:1f:93:4c:1b:2e:22:30:8b:96:e6:13:cb:86:
                    0e:6f:b9:2e:a9:d7:77:40:aa:21:b0:ab:1a:48:7b:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:62:4D:CA:DF:B0:4C:0C:3B:BF:5E:44:91:57:87:56:74:6A:85:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:06:d4:70:de:27:29:15:a3:03:29:e3:41:1f:c1:17:e7:bc:
         87:19:55:42:56:4c:2c:74:b0:b8:44:d1:60:fd:7d:9e:59:3a:
         57:6f:c7:1c:f7:88:20:1b:bc:22:4a:22:5d:fc:7d:e3:43:e0:
         bc:28:2c:57:f3:b5:df:67:51:16:9c:6f:c1:22:81:3c:a8:81:
         84:6f:82:3f:30:33:e9:8d:57:1e:ad:b8:d5:7c:e1:fa:35:07:
         ae:e3:3c:17:36:ad:e8:f3:ad:56:6a:96:96:f0:d7:a1:07:0d:
         0f:16:b4:3a:5d:db:49:01:ad:19:f1:dd:6d:f5:db:63:7a:84:
         3b:f7:a1:af:c7:1a:3e:9b:3d:b9:ba:d4:6c:54:cf:b0:97:9a:
         cf:5d:7d:8d:17:f2:ac:66:04:da:48:e9:08:67:4e:49:97:47:
         4a:a2:1a:4b:6f:0d:45:95:bd:88:aa:5a:46:39:55:00:51:07:
         f9:50:a5:f0:14:40:c9:48:bc:41:d6:00:97:36:c0:fe:c9:9c:
         b8:c6:74:62:30:33:bd:3c:39:f9:16:8d:99:b8:f1:1e:7d:6a:
         bb:4b:d4:86:9f:ae:5e:0e:04:15:f2:60:4b:18:ac:23:39:25:
         66:f0:3c:41:ad:19:45:7b:49:15:52:9b:a3:56:cd:4a:4e:e1:
         4c:9c:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:52:55 2025 by rpki-client