Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa
File:                     8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa (raw, json)
Hash identifier:          NhyMmrcXpMFtRP1gcWrn/MeXXETc6B0EZt21SnvC9g0=
Subject key identifier:   33:C0:9E:07:85:33:BD:AF:34:2C:35:DA:81:AC:03:FE:1D:B3:FF:82
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F4328584A427587856AE04B57D46FA280
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     55223
IP address blocks:        2602:fb0d:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:87:85:6a:e0:4b:57:d4:6f:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=1623bfb8-5383-4399-8098-6aab95ea303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:f4:df:b1:ca:b2:cc:82:97:7f:dd:ce:e2:
                    e5:c9:7c:22:1c:49:ac:6f:30:01:ec:84:11:fe:43:
                    01:22:67:cc:f8:07:f3:a5:1a:67:fa:0c:2b:66:72:
                    53:13:26:b8:cf:5c:a2:6e:d1:0c:9d:ed:1e:31:55:
                    72:66:e0:44:ff:c0:ff:8c:3d:24:39:41:28:bb:18:
                    cf:1a:89:67:e7:52:cb:89:52:c9:ee:5b:67:57:3d:
                    2d:3f:1a:9b:55:c0:e4:00:e7:a5:e8:c5:b6:df:5e:
                    a1:9e:74:de:34:dd:27:f5:bd:02:7f:32:b9:b2:ca:
                    dc:d8:6c:46:92:02:4f:ba:27:f8:60:00:7a:19:d9:
                    b6:09:d2:32:53:d9:36:f8:d7:88:3a:5f:36:29:c1:
                    2e:13:f2:59:b9:2f:02:3c:5b:ae:0a:dc:30:19:a0:
                    6f:5e:27:4f:a0:2a:37:34:b8:b3:f0:a7:a4:3b:b9:
                    ac:da:28:d9:43:81:a5:10:25:5b:4f:9d:5a:30:4b:
                    f4:93:5a:6d:db:2b:48:8a:e6:f7:2d:74:17:06:18:
                    52:26:17:66:d8:fb:c1:bd:e8:e6:7a:68:97:3c:46:
                    38:29:7e:1c:4a:14:ef:b8:63:8b:f9:c0:2f:27:4e:
                    ee:08:e2:b0:d2:4a:86:a1:0f:ed:13:3f:0b:07:67:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:9E:07:85:33:BD:AF:34:2C:35:DA:81:AC:03:FE:1D:B3:FF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0d:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:ee:b2:e2:11:8c:df:3d:61:77:df:6b:9d:ff:29:b8:9a:
         6d:91:b1:3a:17:5a:a4:85:34:a3:f8:35:82:f1:ef:29:d0:bd:
         f9:0b:8b:31:25:a6:27:34:bd:e4:05:5a:ce:68:1e:9e:e2:06:
         24:40:b0:02:84:b9:0e:8d:bd:73:c2:79:ef:5d:a4:30:2c:f1:
         2a:09:cd:b4:9c:70:61:18:76:a1:18:f7:f2:46:79:2e:dd:68:
         e6:aa:5d:8a:85:3d:82:0e:1f:56:4a:f1:0a:eb:c9:15:82:38:
         8a:b5:18:b7:d7:fc:c0:ed:9d:9f:f4:7e:3a:86:f0:b4:e2:85:
         a5:76:bb:4b:10:43:cc:d5:48:c5:3b:48:b4:a3:94:a0:d8:56:
         67:41:ce:09:a9:cc:3e:cc:95:bf:c7:c3:b6:e8:7c:3b:24:72:
         f9:9c:b0:67:eb:42:6f:5b:d4:ae:fd:47:fd:54:b1:73:a6:16:
         ba:7f:71:35:6f:b7:b3:31:24:70:0c:ae:9a:77:8f:ec:f5:6c:
         01:98:d2:fb:01:47:07:c1:b1:9c:76:c3:8d:7b:64:31:32:66:
         47:1e:85:4d:05:9b:90:d7:58:01:04:90:47:f6:bb:22:44:89:
         bd:38:84:5e:e6:eb:57:56:63:15:b6:8e:f3:e4:7b:bd:65:a1:
         29:34:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:43:48 2025 by rpki-client