Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
File:                     dfef8664-2552-32ef-ab49-09e987678f7f.roa (raw, json)
Hash identifier:          t1yRkeiMQxZvzcbDRuhptZBmzCfzpvgWZj6td2NopzI=
Subject key identifier:   CF:AC:8E:7D:11:BC:E1:C1:AA:E8:13:09:4B:D7:90:36:50:76:A1:B4
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584A4AD596C169E76AB957D293F0
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:96:c1:69:e7:6a:b9:57:d2:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=51266039-73ad-4e7b-8687-bfe446990392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:48:af:06:66:7e:58:c4:bf:c1:15:3e:35:
                    00:51:8e:ae:10:1c:3c:9f:f2:27:f2:9a:11:cf:41:
                    59:1c:30:98:b8:b4:3a:28:5b:1d:65:e1:5c:91:d1:
                    b3:4f:37:d8:74:92:74:5f:c7:c7:00:cd:95:23:b8:
                    5b:7c:4e:01:2a:10:2f:e9:73:6b:55:12:41:bd:d2:
                    b3:b3:ea:d7:19:1b:5c:d5:3b:f2:39:23:02:14:76:
                    6b:cf:7b:e9:1a:a1:75:2c:a0:89:75:b5:a3:55:78:
                    5d:be:ef:9f:ef:6a:4c:00:e5:d5:cd:56:bd:19:58:
                    81:af:09:63:fd:7a:a2:e6:b5:f5:14:c8:7c:c3:26:
                    e5:be:06:b5:69:c7:46:05:b1:7b:b4:95:55:44:c3:
                    7d:65:1b:e3:10:27:a2:af:14:98:51:42:3c:10:6c:
                    01:e2:85:06:e8:84:3b:b1:3b:ba:c1:e8:ca:0b:ad:
                    db:a6:1c:f7:6e:6d:73:2a:83:04:03:75:08:65:95:
                    58:c5:0a:91:dc:bd:51:24:ad:ae:6a:87:a9:b7:68:
                    27:88:04:bd:1e:10:b2:90:7d:9d:95:16:2c:70:8f:
                    b9:77:ed:8f:0c:7c:56:ae:c2:28:d5:ea:3e:d7:6e:
                    61:15:4a:76:bb:9f:0c:5f:01:49:2b:aa:89:f6:82:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:8E:7D:11:BC:E1:C1:AA:E8:13:09:4B:D7:90:36:50:76:A1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:80:0b:7b:00:30:f2:a5:34:98:24:39:2d:90:8d:d8:eb:44:
         5f:32:b6:d5:75:33:b7:5d:4e:5c:e1:64:55:b2:bd:21:de:20:
         83:de:ab:b4:98:00:85:c9:2e:a6:1b:1c:69:34:9f:d6:79:f2:
         1b:2a:07:99:16:38:9e:67:00:06:79:0a:f7:79:96:b2:6d:22:
         97:b9:f8:e7:b2:bc:9e:54:9c:d3:b8:5d:cb:6a:2f:c3:2c:d1:
         a8:28:97:7e:2e:e0:84:f3:13:00:09:d0:c5:e4:35:36:25:bd:
         65:b3:ba:fa:bd:ce:0e:fa:56:e9:81:90:7e:b7:04:b2:42:95:
         74:1f:fc:76:a0:dd:49:16:70:62:cb:ac:10:00:58:43:0c:e7:
         b8:be:11:ed:ce:d5:f8:17:cd:8d:76:6b:52:73:68:de:be:df:
         89:30:01:9d:87:cc:1e:98:8f:10:7f:db:45:ba:ca:ed:ed:1a:
         32:7e:f9:97:54:88:26:4e:cf:68:1c:a2:5f:51:3f:09:d7:e2:
         3d:dc:7f:c3:b0:04:9d:c0:15:0f:8c:42:c4:5f:a9:0d:1a:c0:
         2b:7f:df:4d:5b:b2:17:8d:c3:98:97:f3:4b:ae:4c:82:2c:86:
         ac:fd:9e:e1:c4:a8:af:09:c3:c9:6d:b8:ba:6e:35:f1:8d:70:
         c4:e4:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:12:39 2025 by rpki-client