Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa
File:                     66c9451c-fa22-3a63-964c-ed95092ca3a0.roa (raw, json)
Hash identifier:          os3QoJNnOPJa/5s4f1hPPKNdYjbXRDY9YHwDCHYcXhQ=
Subject key identifier:   36:CE:A6:64:6C:5C:10:32:EE:CF:FD:97:63:B6:9C:30:34:E5:4D:38
Certificate issuer:       /CN=6dd32674-3f85-4338-a150-48284427f86a
Certificate serial:       010D0C9F43285849AA4F6F142172C3D174DA7410
Authority key identifier: 67:35:B9:98:89:10:B7:14:14:C9:11:E3:DA:A4:CC:D2:9E:10:F3:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     19364
IP address blocks:        2602:fa8d::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6f:14:21:72:c3:d1:74:da:74:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd32674-3f85-4338-a150-48284427f86a
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=a6828758-8a21-42a1-a64c-cc284d8e01d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:0a:6f:3a:d6:3f:94:f5:e8:ad:28:5e:b1:
                    ca:e7:f4:84:76:07:47:d7:a2:c1:de:25:9f:ab:7f:
                    ca:9c:2f:41:9b:c8:fc:03:b7:36:94:62:27:43:3c:
                    70:d3:b7:3c:f5:54:bf:53:5a:96:cc:b3:ba:bf:0c:
                    b4:38:40:50:8c:f1:d9:45:46:dc:92:0a:13:07:44:
                    77:93:7e:f2:e8:c7:32:c9:9b:d7:27:94:48:71:73:
                    a9:eb:52:2f:18:f8:ee:bc:32:be:a8:25:be:ed:f8:
                    35:6a:9e:de:4c:85:0f:4e:7d:30:e7:50:b5:c5:e2:
                    41:ea:df:64:45:c3:b4:54:00:11:a8:ad:36:de:31:
                    ac:74:97:17:da:06:82:55:b9:1f:80:0e:76:ff:7a:
                    95:61:58:a9:71:63:63:c5:00:72:c1:c9:9f:0b:48:
                    09:33:3b:03:73:6a:4d:49:41:1f:5a:c6:9d:27:4c:
                    85:da:ae:b7:04:05:43:ba:fa:2e:e6:7c:5b:f4:b8:
                    fd:58:f2:fd:1c:e8:a4:f1:ce:3b:82:d9:26:6e:22:
                    25:92:0c:b1:24:a1:e2:7f:03:c0:8a:ce:95:2d:43:
                    dc:f9:03:ce:b6:78:bb:cb:c3:e9:0d:7f:44:85:a0:
                    6c:fa:7c:a0:ee:c5:b9:a3:5c:67:95:a8:c2:7c:d4:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:A6:64:6C:5C:10:32:EE:CF:FD:97:63:B6:9C:30:34:E5:4D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.crl

            X509v3 Authority Key Identifier:
                keyid:67:35:B9:98:89:10:B7:14:14:C9:11:E3:DA:A4:CC:D2:9E:10:F3:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:88:60:ed:b2:0e:a7:5b:18:10:40:93:0d:a4:44:11:8c:d2:
         56:33:13:c7:35:80:d3:97:34:fb:03:1a:2f:33:e4:9e:b0:32:
         51:ae:2c:0c:29:64:99:f6:71:d3:d8:ac:81:bc:6a:1a:3a:54:
         10:83:27:41:d4:a0:f2:10:8e:0c:82:47:c8:35:36:5f:4d:0d:
         22:b9:f1:30:0a:cf:4c:1f:05:7c:e1:08:12:2d:3d:f5:bb:4b:
         ad:ca:cd:f5:28:04:3b:75:74:57:33:de:13:05:70:18:d9:3d:
         83:6c:0f:46:cf:a1:03:19:53:b0:d6:e9:70:1b:63:b4:18:4a:
         d8:2b:db:86:e0:a0:5f:4d:74:eb:b9:9a:8d:93:ec:37:3a:4d:
         35:9c:65:ed:e4:07:3f:bf:07:76:59:ea:1b:cd:30:9b:23:ea:
         6f:08:05:25:34:f6:2c:ed:45:66:cd:9e:db:1c:ec:c6:94:dc:
         9e:5a:1f:f6:6e:89:92:23:f3:85:d9:22:ca:bd:a9:da:43:a9:
         27:3d:6f:a3:f1:71:3d:4a:4b:98:15:9d:22:8e:d6:1d:ad:06:
         29:d7:77:a6:43:f8:d6:5a:af:9a:f4:41:a6:ea:67:b7:05:8c:
         d4:2d:b3:88:78:c9:52:98:41:61:a0:6b:77:0b:da:b3:d3:93:
         75:e1:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:35 2025 by rpki-client