Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
File:                     7498589e-57a8-3a95-86ac-755dca4d3099.roa (raw, json)
Hash identifier:          dkml4GimjFOO39mX9Ef442wlmAY3fNgf4CTnzbHVuxU=
Subject key identifier:   C7:26:25:AA:E5:E8:E7:98:EF:FF:98:82:4E:60:91:8F:A4:2F:0B:8D
Certificate issuer:       /CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
Certificate serial:       010D0C9F43285849DF5A69CAD240A25CE6505B00
Authority key identifier: 54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     397550
IP address blocks:        2602:fdbf::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:69:ca:d2:40:a2:5c:e6:50:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8f647de1-6d00-45d1-a859-81dc20fbd22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:d2:6f:d4:5d:36:18:c2:7b:de:82:a2:bc:
                    cc:22:20:28:b0:75:4b:fa:e7:0f:40:10:42:17:d4:
                    f3:e1:01:12:6d:42:a3:60:bf:cf:3c:18:66:ef:64:
                    3b:36:c0:ec:40:ee:a9:0d:a6:28:cc:62:65:4c:a9:
                    81:fe:7f:ba:2a:de:d5:21:e8:93:52:7c:76:0f:f3:
                    2f:ca:af:1c:09:a0:41:58:0a:49:7d:fa:66:35:50:
                    f4:fe:86:71:54:02:50:6c:94:c3:b9:20:4e:a0:ec:
                    1b:41:68:b6:85:a6:47:89:5f:8d:de:22:1f:1a:64:
                    85:01:0c:6c:27:df:35:82:18:0b:e0:11:c1:51:33:
                    27:90:84:b2:51:9f:91:82:c1:47:33:39:11:fd:36:
                    58:f6:47:28:b9:ff:b4:80:15:49:56:eb:ec:b8:1d:
                    6a:fd:4d:7e:e9:9d:d3:94:11:ff:e8:06:d6:be:a9:
                    07:f8:51:c2:60:0c:c5:be:85:33:68:05:38:46:4c:
                    97:b9:11:af:cb:7b:08:60:55:79:3a:ca:00:bc:56:
                    b9:92:89:9e:34:b2:b6:f9:c3:db:e5:9d:ea:27:d6:
                    ce:e4:6f:28:d6:9e:83:42:d3:6c:5c:84:e3:65:ed:
                    ce:53:e5:c5:07:c9:ee:37:39:2c:1f:cc:c5:1b:67:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:25:AA:E5:E8:E7:98:EF:FF:98:82:4E:60:91:8F:A4:2F:0B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl

            X509v3 Authority Key Identifier:
                keyid:54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:42:d8:a2:d4:84:81:7e:7d:35:e5:9b:81:df:04:71:c6:81:
         f6:28:bb:bc:df:13:74:66:56:4f:ab:22:b8:8d:c8:96:4c:7c:
         74:65:c8:1a:44:8c:ec:46:ae:ae:e7:c4:b8:c9:b3:d2:22:12:
         0f:8f:cc:d7:da:1a:3e:04:3d:e3:4d:2e:9b:69:83:31:46:6f:
         58:63:ba:9e:ec:45:54:f5:c5:9a:c8:64:92:cc:23:25:19:16:
         e8:d9:f3:f5:ae:c5:b7:75:26:8c:43:54:e5:77:1d:33:05:cd:
         14:79:45:d5:59:a9:18:88:2f:a8:ed:f6:7c:d4:b8:94:01:e1:
         37:83:8f:0e:39:91:6f:46:cc:9a:a0:6b:00:31:cf:73:75:11:
         af:63:16:34:a6:92:5e:22:44:d3:00:c5:90:6f:a6:86:71:3f:
         11:18:85:d1:2a:de:aa:36:5f:36:41:82:96:8e:20:7a:40:83:
         2c:62:fc:49:50:92:24:0d:dc:24:23:f2:c3:1a:6e:3b:46:0e:
         8b:78:fe:02:6e:25:f3:ad:9f:42:7b:dc:ee:c5:d1:fb:7c:38:
         0d:cd:9d:85:e4:4d:1c:fc:14:4d:6e:a5:08:36:2d:03:9b:43:
         81:e9:c0:1c:44:b7:d3:43:62:a5:e1:73:35:27:65:71:dd:00:
         54:83:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:25:36 2025 by rpki-client