Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
File:                     0c266f64-95af-3bd2-88bc-11fae1300adb.roa (raw, json)
Hash identifier:          r1ufgw/fDBsS7LbZ8NzwYXivFIlShOO+WnNq7rdsHDs=
Subject key identifier:   99:70:54:89:3D:A2:61:5B:97:AC:5A:71:D8:6A:E8:1E:DA:69:2D:10
Certificate issuer:       /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
Certificate serial:       010D0C9F4328584A63F5B6CC6CAA59C11665DA80
Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     401323
IP address blocks:        2602:f83c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b6:cc:6c:aa:59:c1:16:65:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=e5f2f442-6b38-40a8-acb1-ed116624b3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:46:58:c2:b7:7c:50:dc:15:16:c7:9e:fe:
                    27:9b:fc:81:da:67:f8:eb:45:aa:a8:a5:12:c3:93:
                    7c:21:77:fb:ad:82:c6:61:e6:36:45:a2:b1:50:01:
                    2a:6c:53:94:a7:7d:8b:01:ea:a4:c3:00:a1:3a:8c:
                    35:ae:6d:68:d4:f9:bf:84:7d:66:8b:72:54:9a:7c:
                    f5:8e:f0:8c:3e:3f:2a:c4:09:3c:74:ec:9c:09:2f:
                    b3:fe:7f:73:78:e3:1e:2a:22:35:64:a6:dc:a4:76:
                    69:af:e7:8e:41:ff:43:d1:79:49:1b:a6:14:15:4c:
                    aa:17:8d:d5:38:db:a4:b4:1e:91:40:57:61:aa:2a:
                    ee:d7:37:e0:12:6d:1f:4c:66:a7:96:bf:53:40:be:
                    ea:07:3e:3f:15:d1:93:57:03:8f:73:cf:23:21:7e:
                    e9:48:df:51:85:b8:3d:d4:f3:34:5b:e7:b1:c4:6a:
                    bb:89:c4:6c:e9:64:28:94:70:71:0c:37:50:69:3a:
                    bb:97:c3:61:c3:21:61:86:0e:b8:e7:ce:be:78:fb:
                    29:6c:81:29:1a:c3:81:f3:43:0b:cd:ec:de:41:2c:
                    8e:42:e5:24:eb:a3:4c:ad:16:c3:4c:f9:b2:ab:32:
                    1a:e1:e1:7a:3f:6a:b3:7c:67:be:ea:38:63:95:bd:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:54:89:3D:A2:61:5B:97:AC:5A:71:D8:6A:E8:1E:DA:69:2D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:ae:65:2e:b7:ca:8d:0a:2b:09:24:49:1a:d2:25:1d:96:
         02:78:1f:d7:8d:c0:9b:e3:c0:c4:24:85:22:69:45:cd:42:3f:
         c4:2b:96:3f:c9:d5:bd:5e:51:9b:75:33:69:21:5e:a7:a6:ae:
         14:5d:2a:18:66:2b:65:69:6d:2f:cf:58:22:13:67:63:31:3c:
         89:39:5b:57:c2:22:5b:49:d6:28:e6:ef:fe:dc:11:72:3b:89:
         1c:f5:05:e4:74:48:59:3e:4a:87:b7:f3:1b:02:1f:de:c6:2f:
         5e:0b:d3:3a:3e:3f:a7:bb:3e:90:d5:04:0a:a0:a4:89:08:3e:
         76:13:1f:28:31:93:fd:47:ec:01:dc:f3:11:66:b6:c8:01:e6:
         ac:e3:d7:4b:d6:23:6e:a3:78:be:bd:91:c2:1a:49:c5:20:b5:
         7f:4b:ec:d1:53:4c:a8:3f:7b:05:9e:9d:3d:81:3e:06:53:5c:
         ca:2d:c8:8b:bf:a7:93:1a:6c:95:a8:6d:ad:1a:52:e2:db:5f:
         fc:66:b6:c3:bc:cf:08:ea:43:92:a8:68:86:17:a7:64:dd:fd:
         9a:f1:14:36:5a:a7:b0:c9:aa:25:16:69:21:ca:f4:93:d6:e1:
         ab:18:60:9d:57:5c:1f:07:15:da:4b:9c:81:d4:43:6b:b0:49:
         28:23:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:19 2025 by rpki-client