Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa
File:                     969fcc2a-4175-3fea-a4c4-01144e528826.roa (raw, json)
Hash identifier:          VG4ffhr0y7zjYJcFgFuDBH4zrtDQTDVS/4Q32yYuMNg=
Subject key identifier:   61:80:B0:69:B5:30:E3:2A:90:35:41:01:13:6B:E2:5A:DC:F9:AF:6A
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584A3A1580D91A4213269857B140
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     26042
IP address blocks:        2602:f919:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:80:d9:1a:42:13:26:98:57:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=9ae4abc7-b409-45b8-abe0-054f47c8f8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:45:2e:6c:55:9d:4f:f1:f3:a9:28:14:bc:
                    d9:43:f8:05:c9:66:eb:67:c7:84:b0:ec:b2:67:dc:
                    83:7e:75:d3:bd:63:d4:a0:59:e6:dd:47:e0:fc:38:
                    80:f2:5f:5e:82:d6:6f:50:25:a8:89:c8:09:af:de:
                    d9:d1:03:a9:b7:58:9a:a8:4a:c7:68:09:94:5f:e9:
                    21:b9:65:5a:90:a0:b7:dd:1c:3d:d4:87:da:10:57:
                    83:3f:81:a0:fa:a9:67:6d:a7:b1:53:92:98:46:12:
                    83:44:f3:14:b3:14:da:f7:dd:55:71:ac:9c:7d:73:
                    44:a5:9b:ab:cc:2f:1a:03:61:c6:c8:7f:87:ea:6f:
                    94:46:ca:16:d7:2a:fb:00:e0:a8:59:2e:84:14:17:
                    e3:89:59:43:ad:09:6a:e1:76:6c:76:46:b9:db:0f:
                    e1:6c:d9:38:66:cf:0a:b6:76:4d:f2:a0:36:f7:44:
                    a9:e9:11:9b:b9:22:b1:ff:d9:5f:59:94:69:ec:36:
                    68:b4:ff:d5:33:fb:41:01:2d:c5:dc:6b:55:51:0a:
                    f4:31:a3:0b:56:77:e9:35:d5:e7:7f:16:44:08:84:
                    c6:3a:37:c1:00:dd:4f:1f:e7:04:f7:07:23:80:4f:
                    29:6d:bd:e5:88:37:fb:40:3b:f8:90:56:46:46:76:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:B0:69:B5:30:E3:2A:90:35:41:01:13:6B:E2:5A:DC:F9:AF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:93:a0:21:fa:8c:28:c7:28:38:c8:b1:97:2b:0d:d7:16:
         22:eb:e2:31:10:cc:b4:46:20:18:fe:2d:bb:2a:63:48:33:75:
         5a:e1:20:00:8f:ad:e5:6e:50:74:84:ad:fe:5e:e9:b7:0a:a2:
         6f:c5:05:c6:85:9e:2a:57:6e:42:b4:79:3d:f5:d1:bb:8b:70:
         39:a4:ac:61:c8:1d:33:60:4f:1e:1f:73:3e:fc:56:5e:8b:76:
         ed:a0:2d:92:e5:86:d0:b3:36:a3:d2:d6:e3:0a:09:ee:9a:b5:
         f7:e9:94:fa:76:47:39:37:68:c4:07:53:6b:f7:c0:ac:97:6f:
         be:76:e9:b2:d9:dd:da:97:78:29:18:24:95:51:b7:50:d0:33:
         ab:b5:6f:20:0d:24:e9:b8:64:3c:65:d4:a1:4e:c7:ac:a9:4d:
         6e:19:4d:3e:0b:cb:9f:36:c6:a3:bd:27:c9:29:e3:2c:60:85:
         c2:a7:22:a9:61:63:6a:e3:ba:b4:47:15:38:94:d6:85:0b:63:
         bf:84:fb:1c:29:9b:b4:f5:dd:52:89:a1:c8:7b:f8:83:94:39:
         86:90:06:f0:d2:34:76:f3:68:4b:40:6d:83:9a:ac:86:22:59:
         ab:bb:89:67:36:b0:40:56:e0:1d:eb:49:65:6d:d9:46:17:d7:
         86:42:6e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:20 2025 by rpki-client