Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
File:                     4dcb0f93-9824-30cb-b45f-51c078ec780e.roa (raw, json)
Hash identifier:          ymqA2yDe6jL6nit2J+lDcv4rL31/OvbDHtNZLFXV1QI=
Subject key identifier:   F7:CF:C8:B7:01:3C:F0:30:36:70:A0:9A:1C:BB:FE:E0:14:C9:84:6A
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F43285849E4EFB75EE1E475969759F820
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     32181
IP address blocks:        2602:fea7:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b7:5e:e1:e4:75:96:97:59:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=efdb5038-fa64-42e4-b2bb-4b4aa991775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:52:33:d9:c1:46:21:60:6d:d6:c0:6b:ae:
                    d3:a0:4c:36:31:1f:68:be:4c:ff:62:9d:77:a0:57:
                    b5:05:5e:b0:9a:96:c2:55:10:a4:6e:09:43:4b:31:
                    e7:33:59:bf:2d:08:d4:f8:4b:20:4c:47:73:2a:67:
                    bd:d2:2b:58:ad:1a:bf:9a:48:26:2d:8b:1a:e1:8f:
                    0b:28:e8:c5:cc:02:73:c3:98:ab:51:b2:8f:ae:9f:
                    fa:97:f7:ff:24:9a:19:a9:05:f9:0e:eb:ee:dc:2e:
                    ea:6a:9a:4b:bf:86:1f:76:0f:48:84:8c:42:60:36:
                    ff:d0:fc:03:02:11:05:ce:c1:15:23:cc:dd:a5:01:
                    e0:ba:64:d7:d7:bd:54:38:32:88:98:cf:18:f7:8e:
                    f9:a3:d8:ab:6d:f6:4b:4b:d6:89:20:35:a7:c2:85:
                    b9:db:d2:b2:31:4e:5e:02:7d:4b:bb:8e:98:df:d0:
                    15:aa:cb:f5:35:82:a3:a2:a7:36:07:46:61:f6:21:
                    77:a1:a3:6d:c5:21:1d:9c:30:6c:fd:eb:51:9d:47:
                    c7:af:85:5d:fa:b7:9e:f7:1f:1f:ea:6b:d5:a2:7a:
                    5d:a9:6a:be:97:f7:81:97:e7:f3:af:8c:d3:51:dd:
                    89:95:f6:95:74:f2:bf:76:41:b7:97:37:eb:43:01:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CF:C8:B7:01:3C:F0:30:36:70:A0:9A:1C:BB:FE:E0:14:C9:84:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:48:c5:7e:3d:c7:20:9d:a8:4f:ff:19:18:df:2c:be:35:
         55:13:75:0e:ae:01:ac:18:dd:81:be:a1:58:3a:f5:6a:64:f8:
         82:08:dc:79:ca:34:44:e6:f3:2a:e9:76:bd:e3:41:d1:03:a6:
         4f:eb:40:1e:ea:be:9f:fb:61:d5:92:b1:47:e9:00:d2:de:a4:
         4d:b9:38:2b:53:4b:04:c5:d3:26:df:cf:ad:8e:21:97:23:4e:
         1b:60:f8:c0:2c:2f:f9:d2:cd:fe:2a:87:54:e3:2b:2a:f3:44:
         4a:de:d0:01:11:2a:f0:52:6f:52:3c:2d:68:64:a6:ec:92:02:
         cc:2b:86:2e:b2:0b:18:d7:24:9a:4a:d7:32:65:5e:f0:da:b9:
         ec:74:4d:3e:86:eb:4c:03:67:25:48:b2:08:5f:73:6a:b4:49:
         90:3e:55:0f:ee:8f:2d:ca:06:b8:f1:ea:f9:fd:25:6b:ce:a2:
         c7:bb:77:05:d6:99:f4:09:ad:68:d9:c0:12:77:2c:f9:e8:33:
         1a:0b:f9:2d:22:96:6f:b7:18:19:39:31:a2:55:f0:8a:32:d2:
         33:48:2c:b0:95:cc:50:67:54:3b:bc:f1:a6:6a:b2:40:81:a9:
         58:78:e8:29:0e:ce:56:ac:1a:d9:c7:65:7e:fa:7d:1a:77:ef:
         7b:f9:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:52:17 2025 by rpki-client