Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa
File:                     ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa (raw, json)
Hash identifier:          ATJ3gx+UKTM9wZLKUR1ofapTpo+WMq7xRX6RRbMudQ4=
Subject key identifier:   AD:B8:76:27:5B:38:33:42:CC:02:1E:F6:FA:7C:E8:42:23:62:D1:63
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584A3A158DC0225F28013D528F00
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     399122
IP address blocks:        2602:fcd5:38::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8d:c0:22:5f:28:01:3d:52:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=ea6e2dfe-c950-483b-9cfd-e076e45393a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:74:75:85:03:e0:db:54:2f:31:22:5b:43:
                    a1:ba:a8:c8:dd:45:b8:6c:9e:df:74:ca:84:25:a9:
                    81:de:c5:e4:20:b2:fd:48:7a:29:63:e3:bb:af:23:
                    af:f8:f4:f7:e3:c5:79:3b:ae:50:de:42:b0:fd:f0:
                    e4:53:52:69:63:e2:73:91:c4:82:ec:7c:3f:08:5f:
                    e7:ec:67:f9:84:c2:a9:33:01:54:06:a6:25:ae:43:
                    4a:46:fa:05:b1:a6:85:61:e6:06:fa:95:2e:6b:de:
                    48:64:e4:a2:d7:a2:18:4d:b4:cd:68:24:d9:19:d8:
                    37:14:f7:5d:13:21:27:6a:a8:f6:fc:5f:80:00:d0:
                    2a:e9:79:ae:02:c0:36:ae:22:a6:b6:b5:75:f0:6c:
                    bf:1c:d7:5e:2c:e4:7a:dc:ed:e9:cc:ad:14:a6:72:
                    35:bf:36:57:7c:c9:0d:82:b4:c0:39:c1:a2:01:ec:
                    2c:9d:77:43:55:28:02:c5:7e:8a:1e:95:f3:39:77:
                    bb:1c:5d:8d:b9:22:3a:30:94:10:37:5a:16:22:23:
                    ae:0c:98:53:92:5d:aa:85:17:6e:c5:73:85:ff:88:
                    3b:02:e3:b6:6c:e8:9e:7b:fe:53:78:17:c4:ac:62:
                    bc:f6:38:aa:16:1e:bc:3b:34:89:53:01:55:ad:91:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:76:27:5B:38:33:42:CC:02:1E:F6:FA:7C:E8:42:23:62:D1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:38::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:b5:5d:f6:aa:75:43:0a:12:18:a8:c2:ad:b2:17:3b:81:
         a1:a5:e5:d0:f6:71:eb:33:6e:f7:12:7e:73:2f:f2:aa:56:41:
         c6:dd:07:79:e6:41:8a:19:47:9b:1b:25:2e:a6:61:e6:29:7e:
         e9:78:2b:a2:58:d9:63:b5:9a:90:d4:cf:d4:c2:df:14:db:be:
         0e:47:bc:b9:79:f7:a8:d7:26:05:80:21:ac:4b:35:e6:aa:3e:
         43:04:06:50:64:fe:9d:01:5c:39:5e:13:e9:52:44:0a:44:08:
         99:51:fd:34:0c:45:8b:40:56:db:16:95:fa:35:49:82:4a:b8:
         d8:95:50:f8:03:93:eb:71:40:a0:28:c2:89:51:d2:c2:7f:cf:
         d5:20:e7:e1:24:08:88:30:e5:4f:54:59:3c:6f:4c:a9:1b:93:
         11:09:5b:95:49:b4:47:de:4c:5e:20:c8:80:f7:b0:e5:ee:9f:
         b0:ab:98:63:f8:6a:5e:4a:3d:67:ea:b1:3e:e3:e0:62:00:f5:
         12:3c:40:28:00:92:b6:d2:fc:39:23:1f:ff:42:ec:41:ee:9f:
         61:53:f3:73:24:cf:03:33:1c:4e:a0:50:56:88:0b:6c:2d:7a:
         48:cb:d5:2a:84:4f:6b:49:42:67:82:de:f6:0d:ee:bd:37:df:
         e5:a4:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:17:42 2025 by rpki-client