Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/bfc8a734-fcf1-3eab-93d7-60a783933431.roa
File:                     bfc8a734-fcf1-3eab-93d7-60a783933431.roa (raw, json)
Hash identifier:          31hjvjwIlETY7mi8nQkU8jce8TRWa4S9CIfgeM3X84Y=
Subject key identifier:   11:16:1B:23:56:35:AF:00:DB:7A:4E:0B:E6:35:86:43:AD:60:FB:04
Certificate issuer:       /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
Certificate serial:       010D0C9F4328584A49705E3AFCF9C40359CC9BC0
Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/bfc8a734-fcf1-3eab-93d7-60a783933431.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     399870
IP address blocks:        2602:f803::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5e:3a:fc:f9:c4:03:59:cc:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=50c3f404-dfae-424c-ad0b-849c348acb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:5c:64:18:f7:9c:08:25:17:eb:f7:2d:68:
                    5b:6f:bc:19:c8:38:ae:c9:22:4b:8c:cd:77:54:97:
                    cd:27:e0:04:73:e8:a5:ac:29:0f:65:c4:37:c6:ac:
                    ce:c5:d5:58:40:39:55:30:fb:b1:d9:5d:0c:29:f5:
                    eb:3e:26:21:35:a0:54:75:f2:f9:66:9b:02:55:f3:
                    ce:1f:ec:27:a1:1c:d9:c0:2c:f7:6c:30:3d:af:3e:
                    28:4b:60:a5:e6:48:a0:3e:1f:0e:3b:84:84:0f:98:
                    d4:58:2f:08:fa:4d:12:d5:18:64:7d:a3:79:d1:5d:
                    f7:ee:78:f9:55:e6:1d:f0:f5:0f:55:dd:a7:76:07:
                    95:f4:38:1e:e3:ca:2a:8a:5a:40:96:d1:12:7b:00:
                    7a:4f:4c:e8:f1:b3:f3:40:11:d4:bf:85:54:90:f3:
                    f6:da:56:2c:16:e6:e4:fb:8e:2a:73:9e:f5:09:1d:
                    5e:bd:18:6a:c8:6e:5a:ea:cd:fd:8c:78:fd:39:9b:
                    5c:4b:43:b5:b3:4c:22:f1:75:8c:0a:09:f9:94:da:
                    a6:97:3e:03:cc:e5:27:1d:7c:f6:a0:29:af:25:4d:
                    6b:94:f4:a3:d0:f2:9d:8f:75:91:8a:4c:9d:71:0d:
                    aa:65:93:5b:53:98:78:c6:98:23:7d:a3:69:05:5a:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:1B:23:56:35:AF:00:DB:7A:4E:0B:E6:35:86:43:AD:60:FB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/bfc8a734-fcf1-3eab-93d7-60a783933431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f803::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:18:64:1e:5f:21:4b:70:be:a7:95:c6:51:e9:cc:82:b3:
         f7:46:4c:7c:ee:d8:59:14:13:17:4b:05:ab:81:7a:93:03:ca:
         1b:fd:08:25:01:de:75:36:a8:c4:61:9b:7a:9a:ac:64:36:20:
         08:e3:14:d9:2f:47:b3:f7:6d:b5:94:b0:91:bc:b6:c2:1a:47:
         0a:08:65:71:51:86:fa:25:bd:ca:df:83:9e:30:cf:21:ec:33:
         52:f1:dd:f7:47:3e:d0:5b:07:b3:a2:f3:22:a9:27:35:a2:92:
         22:4b:3c:95:9f:93:e2:cf:72:b1:6f:89:7e:73:de:dc:7a:b9:
         3a:05:a0:68:eb:ed:b6:7e:f0:35:af:ef:25:c5:d9:5e:f1:e6:
         6a:95:1a:1b:45:b9:33:fe:a8:57:15:22:8f:46:03:a3:b0:03:
         8d:1c:ca:2d:6d:c4:b4:a8:bd:be:ee:f6:ba:1f:a0:68:25:c0:
         86:c0:22:8f:2a:42:ca:66:1a:02:88:46:b6:f7:c7:5e:1c:c8:
         b6:e5:ad:ff:5b:28:b5:06:9e:b6:d5:a7:1b:8c:4f:d9:5e:b6:
         18:cd:7a:7c:4c:6e:43:9a:69:a3:17:03:54:cd:7a:de:57:86:
         95:e2:2d:30:66:b2:34:27:b7:c4:c0:0d:0c:fe:07:66:d2:86:
         57:73:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:55:39 2025 by rpki-client