Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
File:                     c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa (raw, json)
Hash identifier:          oOUHSVCYT6ccSOkGs2JFHG8X1urZW58Q7Qzd1lmLqok=
Subject key identifier:   CC:DF:14:F0:BE:B0:C7:97:EC:A8:98:7C:5F:D3:85:3F:89:D0:4F:33
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F43285849E91F9F38E0E877D595011B80
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     36369
IP address blocks:        2602:fe69:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:9f:38:e0:e8:77:d5:95:01:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=65b3a581-f0de-4eab-85ae-8995783f2dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:0e:ec:25:0f:c3:ef:48:67:c0:c6:ae:ef:
                    7a:35:48:a7:dc:e8:82:8e:44:aa:b0:dc:5e:5b:12:
                    63:a6:d0:1f:45:04:1b:06:e4:f9:53:34:0d:40:61:
                    d9:ea:6a:3c:a0:fd:77:ba:24:97:a0:ca:a3:75:51:
                    0a:bf:ec:ac:9f:f1:94:91:cc:97:f3:41:34:a0:52:
                    ff:07:ae:10:04:62:61:5c:e4:dc:5d:33:9b:9c:54:
                    06:95:27:70:ad:4f:c3:a7:3f:d5:de:df:47:68:f8:
                    bb:a3:be:13:e3:7d:93:89:06:eb:ac:25:30:4c:83:
                    98:4c:2c:b4:27:e0:84:04:f4:e6:53:09:67:b2:21:
                    b3:b2:55:c7:96:6d:a0:b0:f2:ff:58:b8:6c:7a:c8:
                    67:7f:42:84:30:77:1e:72:96:2c:eb:80:21:a0:32:
                    04:03:0a:95:a2:45:21:c2:aa:03:79:ed:2f:1a:36:
                    07:54:6e:1f:6b:d2:12:b8:81:0f:21:0c:3b:f7:37:
                    0d:e8:cb:f3:2f:1b:98:0f:6a:2d:eb:84:fc:c1:d3:
                    ab:5b:63:a6:89:94:23:04:f1:60:e5:e3:2f:c9:ea:
                    61:56:ca:e0:49:fa:9f:51:c9:03:09:7d:60:b0:35:
                    5a:43:c3:83:64:bc:ca:7d:be:be:35:36:7c:f5:6d:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:14:F0:BE:B0:C7:97:EC:A8:98:7C:5F:D3:85:3F:89:D0:4F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:40:7a:30:79:30:8b:68:04:e6:37:48:f6:fc:ae:54:00:
         2a:d2:f8:06:7e:de:03:7c:b9:4b:e9:27:4f:9f:3a:35:4e:f3:
         a5:34:a9:9c:fd:c9:ca:15:28:9b:01:65:74:6e:bf:fd:d1:07:
         21:78:d3:ca:45:23:88:86:7d:b2:bd:30:68:b8:c0:ac:cf:91:
         21:8e:7d:82:1e:d7:60:37:b5:42:f1:b1:de:a6:a6:9a:a2:c6:
         24:6c:13:80:1d:45:9a:0c:73:b7:35:94:e3:4f:38:32:14:75:
         4a:19:92:95:ce:a1:50:9d:19:84:0c:b2:b3:87:cc:ea:8e:f2:
         f3:6a:29:63:86:36:d2:cf:16:77:99:64:6e:83:ee:50:16:15:
         24:aa:20:f1:b8:6c:b6:12:f9:87:d7:a1:5b:2e:07:10:55:b4:
         06:b6:46:2d:c0:fc:60:b2:3c:62:f6:18:1f:d4:9b:bb:2f:f6:
         0a:94:71:ba:84:e7:7d:f8:ea:ad:c1:8d:32:5c:0f:e7:03:c4:
         a4:62:f0:f7:89:fc:31:2b:03:25:d7:c7:8f:61:34:af:33:a6:
         3c:e2:21:26:84:f6:40:8d:d1:fe:a1:b3:3e:36:e9:58:42:7d:
         f0:0e:18:36:09:a7:f2:66:ca:55:09:53:68:06:7b:b8:42:1e:
         da:29:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:44:42 2025 by rpki-client