Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa
File:                     543fdf05-2561-38f9-bd60-07d28361b6a8.roa (raw, json)
Hash identifier:          Ywe9Pg79w35Pc7YBsn+uPgzMwj3Nm3EiCY1WKy5ftm8=
Subject key identifier:   9B:91:BC:A6:D2:2F:40:7D:7D:79:A5:6A:A6:2E:E1:11:D9:78:90:7B
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584A497073F71FAA1D909C1F02C0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     27385
IP address blocks:        2602:fdaa:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:73:f7:1f:aa:1d:90:9c:1f:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=f6fbd665-d9a6-4272-8381-704bf60d3bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:26:cc:9c:b4:5b:ce:cf:7b:74:bd:22:30:
                    da:99:46:f6:64:85:ed:41:82:3e:65:28:74:a4:9d:
                    be:55:03:7c:c2:80:d1:24:04:fa:46:cb:95:64:12:
                    37:85:e9:af:ad:d3:e8:2c:df:a0:b0:35:e5:9b:9d:
                    a5:3f:ba:a7:93:66:88:fa:78:56:1f:51:e1:04:e2:
                    16:03:cd:6f:9c:4b:5d:d0:bf:95:e5:91:af:3d:a1:
                    ef:4a:b3:88:d5:1b:f6:0d:0f:a7:ad:77:91:65:90:
                    90:32:c4:c0:3a:e6:56:b8:e9:e6:d9:14:c7:3c:f2:
                    b7:54:c5:97:32:c9:fc:4d:3d:e3:42:7d:2b:6f:cc:
                    98:35:3f:36:9d:7e:2c:40:77:e2:1e:0f:97:75:a3:
                    09:aa:7d:b3:d0:ef:86:92:97:ec:bc:ab:72:b5:e1:
                    26:f1:df:d3:19:90:a2:66:15:65:fe:f2:25:b1:2f:
                    00:e5:89:ac:bd:49:5d:24:63:07:14:6d:71:67:9e:
                    df:19:bb:89:1b:d3:73:81:24:b4:10:e8:66:fc:07:
                    a2:c0:89:ec:5f:e5:73:8e:68:65:8f:64:26:71:2a:
                    c1:cb:53:f6:85:40:7d:d4:fe:f6:f8:cf:92:70:4e:
                    bb:8f:94:39:e0:72:b9:a5:a4:84:86:45:64:1b:b6:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:91:BC:A6:D2:2F:40:7D:7D:79:A5:6A:A6:2E:E1:11:D9:78:90:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/543fdf05-2561-38f9-bd60-07d28361b6a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d0:e7:d9:ff:80:22:e3:6e:d8:b6:76:72:74:09:74:66:18:
         10:01:28:a6:27:61:f2:56:a7:9d:6b:9f:02:fc:db:ed:15:44:
         1a:6c:9d:4f:6b:50:e5:7e:59:c1:4c:3a:51:89:0f:c1:a3:36:
         06:5f:6d:18:38:dc:87:da:b3:86:30:16:fb:cf:14:91:29:fb:
         62:d3:12:0f:0f:09:02:b8:5a:4a:5f:df:5f:5e:5d:be:8a:af:
         7c:96:de:ad:d2:16:29:f9:14:0e:d1:ba:1e:f6:58:7a:4d:f0:
         6e:4c:b0:99:13:37:1e:09:d0:6f:97:af:58:12:ae:9f:c6:ab:
         53:bd:da:67:ff:2e:be:e0:d7:a5:d1:d4:8b:ef:da:32:ea:c4:
         71:2e:8a:bb:f5:90:9f:d8:0b:6e:f3:04:02:2a:5a:90:a4:12:
         2a:c7:31:82:e6:ba:3f:4d:f0:4b:ff:9b:e8:e8:b1:9a:a8:38:
         d7:46:e8:64:f4:04:44:89:d5:84:55:c0:b8:ec:dc:2f:b9:bf:
         2c:0a:e8:4d:b1:94:c3:2f:e2:7b:a2:21:1d:94:a4:78:89:2d:
         f0:b0:cb:45:c5:3b:0a:e7:5f:81:9e:3a:c7:6d:a8:58:48:b3:
         49:10:95:87:38:85:92:e8:6a:fd:e3:56:b0:b0:57:d8:dd:06:
         70:ce:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:24:31 2025 by rpki-client