Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bbdbd4dc-b80a-3fbc-aaf8-b7e3ae521752.roa
File:                     bbdbd4dc-b80a-3fbc-aaf8-b7e3ae521752.roa (raw, json)
Hash identifier:          CYwMnZBPeyMIazHKYcs0WQ/vIoH6fRBQa1lbKN7j4ig=
Subject key identifier:   D5:18:A4:6D:05:FE:66:50:47:C7:EE:B9:D5:20:AE:BF:F4:93:23:73
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584A5CFB33CED02786D773CB1700
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bbdbd4dc-b80a-3fbc-aaf8-b7e3ae521752.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     398705
IP address blocks:        2602:80d:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:33:ce:d0:27:86:d7:73:cb:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=377315f6-aed5-4d75-85a1-76be09ba8e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:c9:c3:95:6f:69:c0:c8:cc:e1:f6:5b:91:
                    52:fd:a9:de:4e:71:5d:41:40:85:b0:be:b7:ce:94:
                    cb:cf:71:aa:6f:55:5b:ed:b5:67:8c:ac:4a:9f:07:
                    81:08:f8:3a:ff:37:75:2b:17:eb:1d:7f:76:82:dc:
                    8a:e0:da:e1:2c:9a:d5:63:d9:24:78:02:05:07:48:
                    31:f5:08:68:aa:a7:f2:71:0a:d0:18:06:73:31:ec:
                    a7:2e:59:a4:d6:07:a3:13:c1:f6:cd:bd:24:19:c0:
                    f7:d2:90:01:d5:70:85:76:19:80:1e:10:d4:fe:54:
                    2b:04:38:3c:72:3b:b6:f3:d1:e7:cb:53:de:75:dd:
                    06:a2:fa:62:e3:4f:68:94:4f:94:51:50:e7:f2:16:
                    5e:6a:99:85:be:b6:48:a0:a8:7a:76:bc:34:95:86:
                    60:14:e0:f4:ad:7e:29:e3:ee:2e:4e:95:71:3c:af:
                    de:6d:39:6b:ff:36:6d:2b:63:7d:7f:f9:44:a8:a2:
                    9e:fd:dd:39:43:ca:43:df:ed:41:79:58:c1:22:da:
                    14:96:e4:79:a5:f4:5f:4a:8e:73:14:97:fd:a6:fc:
                    1f:88:76:f6:94:55:4b:eb:00:6e:ee:08:aa:21:4f:
                    5d:6b:05:0f:3e:f3:79:19:fa:a7:62:c7:e4:7d:9f:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:18:A4:6D:05:FE:66:50:47:C7:EE:B9:D5:20:AE:BF:F4:93:23:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bbdbd4dc-b80a-3fbc-aaf8-b7e3ae521752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:1005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:38:4a:36:6b:7a:0f:af:a6:cc:90:47:d6:63:37:81:b7:86:
         de:bb:73:a0:81:cf:f1:dd:90:1c:70:0b:02:75:1a:d1:0f:d8:
         f1:01:7b:f4:e1:a1:2f:4f:99:6e:58:c6:a0:89:79:5a:0a:fd:
         10:48:40:35:75:52:46:2f:8a:c4:d7:a2:55:5b:6d:38:c0:10:
         97:3d:de:e7:98:9f:41:25:34:0a:00:95:74:4f:59:95:51:c8:
         fe:0c:55:67:3d:90:a2:0c:da:c9:c7:20:81:24:8b:a4:ac:e1:
         09:94:b4:97:6e:14:36:90:a7:6f:6b:8a:85:56:20:98:1f:9b:
         2e:98:c5:e6:87:6a:e4:5e:67:35:82:b2:ba:d3:ba:01:30:01:
         0d:72:84:e7:7b:ec:27:2b:49:0b:90:dc:12:c2:3c:25:aa:03:
         30:45:1b:9d:0a:b7:83:27:de:07:62:92:63:a1:36:28:93:2d:
         a3:3b:03:4b:dd:26:2f:5d:24:f7:bd:52:38:cf:c0:bd:42:44:
         78:a2:21:9d:62:3b:0d:80:ad:8a:cf:3a:b2:dc:69:90:c6:33:
         88:d5:e7:d0:8d:b1:a9:0d:7f:c4:08:12:5c:20:7f:72:70:c2:
         32:0d:8e:27:db:4b:86:b3:32:7a:93:00:0d:05:3a:0c:31:9a:
         6a:d1:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:59:59 2025 by rpki-client