Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa
File:                     d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa (raw, json)
Hash identifier:          T6SKkojPrdXPfKEjv1W6Rq3dLD3AY/8+1EkGopuKXEk=
Subject key identifier:   52:B1:D9:B7:19:00:0C:B9:06:D3:85:7B:9C:3C:C2:0D:9B:70:29:AE
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F4328584A549B1FE65518BE3307667600
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     396226
IP address blocks:        2602:fefe::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1f:e6:55:18:be:33:07:66:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=2507cabb-46a2-4a2e-8aa5-4e9a42cbccc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:a3:53:bf:67:c4:e5:58:3c:c7:80:15:66:
                    8a:cb:88:78:f0:74:2b:8f:e4:c2:61:88:41:53:06:
                    3d:bc:6f:d7:e7:08:b7:2f:94:28:51:0c:31:21:c8:
                    d3:27:f5:eb:9d:cb:d9:a3:2a:17:1e:72:68:26:dc:
                    b3:11:f9:99:fb:e9:1b:22:21:18:76:bb:7c:64:82:
                    68:f6:f9:77:44:ef:27:62:04:30:51:49:00:fd:f9:
                    94:3a:2b:f7:16:3e:82:94:fe:04:a0:b3:23:e6:23:
                    29:d9:26:dc:98:85:b1:b8:d8:0b:32:87:d0:bb:74:
                    6a:99:cd:bd:fd:4c:04:0b:b3:2a:b1:20:13:13:c8:
                    ca:9b:18:c0:eb:22:41:e4:4d:34:85:f1:c6:6e:8e:
                    10:7c:7d:6d:28:ce:19:c4:42:bf:35:72:0e:22:b6:
                    4f:41:e7:70:de:3c:6d:cc:3d:ab:37:c7:f6:2b:2e:
                    26:8a:3d:36:8b:4e:d8:ba:33:14:19:60:c1:f7:df:
                    0f:6e:fe:1a:76:1a:92:1c:04:ff:a7:bf:aa:7e:4a:
                    cd:c4:b1:a2:aa:43:e7:5e:4a:73:12:7a:f8:bc:3d:
                    75:f6:af:d8:e1:1f:9b:6b:8a:52:62:1c:90:68:fb:
                    bc:84:bd:ef:fa:49:44:c5:db:5f:43:e1:26:53:6a:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B1:D9:B7:19:00:0C:B9:06:D3:85:7B:9C:3C:C2:0D:9B:70:29:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:1d:50:5e:cd:12:be:53:cc:47:56:9b:31:be:90:22:7a:
         33:8b:98:ea:16:af:69:40:4a:41:9f:fb:cf:4a:97:61:92:83:
         fa:92:df:dd:da:0e:18:ec:a4:e4:51:71:04:34:8a:98:5a:08:
         80:d7:b8:8a:12:73:8b:b9:0f:24:8b:83:54:6b:13:42:66:6e:
         9a:e3:bb:5c:95:98:6a:67:03:07:b2:64:9a:24:64:86:60:e8:
         b1:e2:89:92:78:76:19:0c:82:78:ee:81:cd:0f:8d:c8:c4:34:
         02:7d:6a:b3:e4:82:13:50:da:0b:5d:08:d9:25:58:90:3a:f8:
         3d:1f:2a:25:f4:44:e2:e3:e8:0a:04:d8:83:3e:ce:a9:3d:7d:
         cc:91:fd:1a:eb:11:49:1a:6f:e6:51:ba:b1:4c:66:fe:98:4e:
         75:d2:c2:a3:f3:5b:ab:f2:1b:6e:5d:c4:f6:d4:40:c6:fb:48:
         57:2d:aa:61:6d:50:33:9b:76:74:82:19:97:1e:97:28:00:79:
         bb:42:f0:c6:f9:44:1b:ef:aa:87:39:a8:db:16:5c:9d:8b:43:
         0b:54:af:bf:df:e7:35:96:58:22:0c:b5:82:c4:45:46:c4:bd:
         2d:8f:1c:e4:61:60:d2:22:8b:83:20:5d:b1:b7:10:bb:45:f8:
         3c:4e:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:17 2025 by rpki-client