Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
File:                     99072b6c-3150-3cc4-8cca-40f9b7524062.roa (raw, json)
Hash identifier:          t8Moub5Ly5eH4HPUKNajKr2aVf5IKhmQiCH5UmX+M3w=
Subject key identifier:   68:5C:12:BE:4A:80:D1:DD:68:3D:C1:A2:C8:D4:CC:71:CC:9D:04:07
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584A5765C1045C773311AE492E40
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     51999
IP address blocks:        2602:fbe9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c1:04:5c:77:33:11:ae:49:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=3ec3ae93-f3c0-4841-b997-9ac310a4d2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:b8:78:9a:2f:e1:28:95:e2:fb:9a:68:e0:
                    0b:10:8f:81:b8:81:ad:93:bf:57:95:b7:48:a6:6f:
                    1f:26:72:64:02:4c:b8:93:10:9a:60:94:38:68:26:
                    fa:72:c7:33:0a:10:a8:96:c1:35:55:d4:b4:4c:35:
                    67:0f:d7:b6:17:51:58:66:43:b7:57:c7:60:6a:9a:
                    89:52:a3:7f:69:64:74:05:15:bf:b9:a8:ac:49:a2:
                    49:fe:44:4c:fe:88:85:ea:21:8f:f9:4e:d8:ca:1b:
                    e7:3d:53:62:f0:ee:68:2f:5c:fd:03:9f:90:f4:59:
                    ca:a6:90:d4:20:6c:08:70:3b:b8:f5:89:17:b2:d2:
                    5b:53:3a:bd:d8:55:7c:a5:a1:99:69:f9:5c:0d:17:
                    d5:5f:4f:14:36:53:c9:bd:9c:dd:32:67:51:26:db:
                    7d:12:43:86:db:96:96:89:43:fe:cc:91:11:c9:56:
                    d1:8e:14:d5:b9:fd:7c:07:40:18:44:51:65:34:29:
                    c0:e6:6b:36:b1:bf:3a:53:e8:c7:f2:c3:ff:6d:8f:
                    ee:57:98:f2:a7:d1:03:f0:79:b0:a8:8f:46:bc:ed:
                    66:c1:c5:5d:66:5c:2a:1e:26:23:84:cf:ed:af:14:
                    bc:9b:f5:9b:2e:b6:da:40:00:72:ff:16:48:99:60:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5C:12:BE:4A:80:D1:DD:68:3D:C1:A2:C8:D4:CC:71:CC:9D:04:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:18:3a:6c:e4:49:66:46:4d:52:22:8e:3c:af:fd:02:ad:
         6e:9d:0c:f9:de:c0:43:6c:12:cf:5d:66:52:46:fd:e6:fa:3d:
         28:60:d3:81:2a:f5:82:4c:b6:45:c5:ee:ca:25:51:22:ef:de:
         91:7d:14:69:4b:ca:40:c0:2a:a6:96:d8:9f:c0:d4:7f:0d:6a:
         02:74:6a:f2:b8:fe:ee:e3:8b:a9:56:a4:84:2d:a3:63:72:63:
         2f:a7:0f:f1:22:d0:d9:0a:b5:34:48:e0:d3:14:c3:52:d4:7b:
         bd:b8:4a:9f:5e:5c:54:22:c3:10:f7:01:22:ef:24:1d:f3:39:
         bd:53:8e:38:d5:87:8a:c7:56:31:e9:f9:75:65:ce:81:15:39:
         91:f8:fa:55:39:04:95:e4:ca:62:e8:98:e0:1b:08:0b:34:49:
         86:78:c5:05:50:b8:41:c0:67:02:2c:98:cb:7e:ae:4d:c0:5e:
         47:7a:dd:e2:26:2a:8e:9e:db:c6:ae:3d:9a:26:76:f1:b0:70:
         c6:53:92:b0:c7:8b:5e:7f:b3:ab:0f:16:cf:f5:6f:51:6e:4d:
         2a:a9:56:0e:a8:a1:a0:11:20:62:14:7e:25:2c:46:b2:40:62:
         99:e0:da:7b:e0:b3:44:2c:a3:99:c4:4b:5c:41:41:8b:fd:82:
         e0:6d:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:28:22 2025 by rpki-client