Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa
File:                     13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa (raw, json)
Hash identifier:          LXoXx0hP27zOO89cxtEi4C7grUjMN+X4D0WBHIqHtkw=
Subject key identifier:   D4:21:73:A6:36:CD:33:56:C5:36:B4:E0:7F:1B:92:49:47:8F:4E:70
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584979743DE035380439D7976D80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     216268
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3d:e0:35:38:04:39:d7:97:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=2da72ca3-8d50-42c3-9824-d817cd2b72c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:cf:2d:e3:13:6b:4c:34:18:96:e3:d5:db:
                    bf:ed:c1:9f:fc:9d:12:bb:da:b3:1e:6e:98:ba:e0:
                    ce:59:05:a9:e8:fb:d9:9a:6c:84:3c:6f:61:d5:a6:
                    57:89:d1:ff:1b:5c:dc:5e:06:09:09:bc:19:84:2b:
                    0f:eb:76:a3:74:4d:0e:d1:a1:42:6f:73:dc:44:53:
                    ff:09:7e:28:9a:16:fd:4f:11:f1:ab:d6:d4:0c:89:
                    b9:fa:29:3b:09:0b:2b:01:4a:12:6d:8f:7b:8e:12:
                    de:4f:4e:27:4c:0c:7a:f9:2a:26:82:15:aa:9c:5f:
                    46:04:5a:62:a2:00:a1:3a:5d:cc:b6:23:d8:fc:ae:
                    e1:9b:9e:35:24:99:e5:87:85:4e:7f:bb:ed:ca:53:
                    17:98:b6:42:f7:cc:9c:04:c2:5b:96:a3:7c:81:80:
                    cc:9e:1a:0c:e0:1d:42:e2:3b:15:18:25:e2:6e:b9:
                    31:aa:58:fe:d9:60:c2:95:29:fe:f3:07:a6:b6:c0:
                    e7:71:e9:5c:68:01:98:b1:c8:a4:0c:58:93:ad:e3:
                    ff:1e:49:64:06:ac:b5:3f:f4:0c:4e:4b:8e:b1:ad:
                    af:5e:73:55:82:6c:16:ff:43:2e:2a:9f:ca:de:60:
                    58:db:c6:40:1d:5a:e9:15:59:35:75:20:02:74:38:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:73:A6:36:CD:33:56:C5:36:B4:E0:7F:1B:92:49:47:8F:4E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/13bc1c4d-0c6b-38cd-98bf-ae3f8ebb18b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:07:61:8a:37:c9:3e:c0:b6:f0:7e:77:8c:e6:ff:70:30:
         99:09:96:bb:b4:9c:3a:28:29:0c:db:c1:15:c9:fb:8c:d4:07:
         75:8b:c8:c7:b7:26:0b:65:42:e1:c1:59:e2:3a:65:9d:e7:d2:
         52:83:b8:18:6a:2a:94:21:f3:74:15:2c:a8:ee:a8:8a:f9:07:
         98:35:35:f2:bb:d9:42:06:1f:22:ee:e6:ac:1a:ac:54:45:93:
         c6:4e:35:b2:3d:1b:fc:88:7c:da:e9:2d:1e:5f:64:c8:ee:5f:
         fe:40:f7:b8:ad:66:f8:86:f7:0d:06:7f:c0:a3:80:8a:b0:83:
         d5:1b:d5:05:d4:a9:9f:ca:6b:94:22:ef:d5:27:4e:65:6c:4b:
         2b:c7:22:a8:f5:ac:77:d4:96:32:c7:34:84:e8:1e:46:b5:17:
         50:66:20:f3:24:15:a3:b8:6d:4a:1c:24:80:38:cd:cd:d1:c6:
         66:85:ce:0e:72:95:75:00:0d:03:99:85:9d:da:6f:6a:7f:d4:
         a7:28:af:89:26:69:8c:4d:f7:11:d7:17:df:39:f9:b1:93:4b:
         69:f4:ad:f9:a2:fd:e2:ee:f6:b2:58:7d:fc:0d:e5:99:be:c7:
         24:c4:3c:27:a5:e9:38:b8:6c:4b:56:35:66:6a:b4:dc:c3:c0:
         ce:14:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:40 2025 by rpki-client