Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa
File:                     c925892a-4d1f-31f7-bee4-e57cc123193c.roa (raw, json)
Hash identifier:          oAlPn+G1mA2XBg75AsXTxuDkNvFv9S+H4+I2fO9TUfk=
Subject key identifier:   B3:89:D3:C3:05:7E:F1:97:E5:8C:49:48:3B:11:DA:D3:2F:19:FE:30
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584A331AE1319E6EA5B89646DD00
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2602:fc8b:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e1:31:9e:6e:a5:b8:96:46:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=2c56b1d6-a2b7-4945-adc0-d1991ccd83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:2c:81:46:dc:ae:80:38:6d:17:d0:06:0b:
                    61:16:d2:8b:d5:68:0b:3c:f9:02:e1:3d:e8:5f:6d:
                    84:df:ad:f9:0b:ba:39:b9:f4:9c:17:e3:55:fb:3b:
                    84:cc:ed:d0:1d:db:96:99:05:02:6d:89:b3:61:ba:
                    12:81:a9:34:5b:0d:62:7b:9b:de:4b:64:b5:6d:0b:
                    d7:92:67:ff:b3:e1:c9:2a:93:9a:4f:1c:c7:7e:4c:
                    f2:e6:3d:69:29:84:c6:d1:19:a1:d8:d4:e1:23:25:
                    d5:79:b4:68:24:f5:a4:a2:2e:5f:ba:b2:0c:ce:3c:
                    a0:6e:65:0e:80:8c:e1:1e:4c:2b:f7:95:9a:82:4b:
                    82:de:fd:dc:7a:f3:1d:8a:08:c0:73:81:93:9d:da:
                    5c:84:e7:02:b5:40:4b:bb:cc:2d:49:87:9d:c7:93:
                    96:65:3c:42:eb:9d:ff:bf:87:20:51:24:4e:2b:d0:
                    d3:dd:af:7e:bf:7e:a9:e9:e3:93:27:da:0d:d9:da:
                    ef:0f:4e:51:22:e1:d3:c8:3a:66:94:61:c5:07:c3:
                    db:7a:d8:12:be:93:72:10:f7:59:58:fc:7c:45:1f:
                    00:60:c5:36:8f:ff:03:7b:1f:16:74:fe:61:c4:a0:
                    ee:c2:dd:68:06:3f:53:59:28:4d:fc:c1:73:19:c2:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:89:D3:C3:05:7E:F1:97:E5:8C:49:48:3B:11:DA:D3:2F:19:FE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:0a:b5:2b:ea:fb:3d:22:66:6a:db:9b:57:6c:72:6e:01:
         0f:8c:72:5a:28:fc:c3:c2:47:36:20:3e:b0:57:4e:d9:f0:44:
         e9:54:7a:72:ac:02:e7:27:5d:9c:82:2f:83:d1:06:a8:41:f6:
         4d:d1:56:82:67:71:0e:29:3b:f5:34:ea:47:26:05:d3:4d:a4:
         db:84:58:db:9f:79:19:e4:e0:24:ee:cd:fa:de:34:42:f7:8c:
         9a:76:7f:68:c3:bf:9b:63:81:a1:99:c4:fd:4c:f6:6d:11:79:
         95:88:54:d8:63:4c:4c:7a:a7:2c:b1:5f:d2:4a:63:28:bd:84:
         bc:a7:a7:40:2c:bf:b4:a1:0a:58:de:c8:fc:4f:ed:8b:01:70:
         6b:57:36:ce:57:96:35:91:cc:4d:ad:cf:f2:fa:c6:f8:e6:3a:
         41:8c:7f:30:86:e6:6a:e3:9e:be:c0:66:1c:cb:96:d5:55:3c:
         de:d8:f7:dd:8c:38:02:95:e1:af:5d:b2:34:86:a0:8f:86:4c:
         7b:c5:02:1c:ac:cb:0e:d9:95:e5:de:0d:00:b3:59:46:7d:7d:
         5f:3a:24:8a:64:53:1b:5d:92:98:c1:8e:32:09:2b:33:63:f5:
         a5:be:6e:61:d4:85:ff:0b:85:2f:2c:a2:38:b6:e8:2a:2e:07:
         a2:5e:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:34:27 2025 by rpki-client