Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa
File:                     7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa (raw, json)
Hash identifier:          2pD2crBLTCRGZ0tfDh+WB+QEn9f1zGrnOCQJJRFSj70=
Subject key identifier:   AF:57:9A:61:95:50:D1:F4:2B:37:1B:DD:C9:C4:FB:88:7C:1B:F1:35
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A411047FDAFDF2338033797E0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     63150
IP address blocks:        2602:fd6f:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:47:fd:af:df:23:38:03:37:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=2b533dd6-7f27-478c-bb8d-3eb8b0a1b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:66:d4:56:68:94:de:ec:e5:b8:6a:2d:5e:
                    de:61:93:40:bf:c4:e1:5e:97:12:7c:9c:7e:bf:c6:
                    ae:46:7e:c4:9f:1c:74:a0:eb:84:88:f3:76:6a:d4:
                    80:d9:85:28:25:07:5a:b9:ae:a1:cb:d5:2d:58:25:
                    c2:7e:9b:34:1b:c4:70:18:63:91:78:e4:c8:df:03:
                    92:1d:5a:6f:c7:d2:e6:6c:db:a4:9a:6c:7a:56:ab:
                    11:9f:75:18:7c:7c:20:30:b1:93:f8:e7:34:04:88:
                    5e:52:b9:28:de:5b:2e:5c:66:52:cd:3c:e1:b6:b1:
                    0f:2e:32:d3:0b:e5:00:de:f7:bf:db:5d:57:5d:17:
                    1f:ad:86:30:2f:65:00:a3:7d:15:1c:27:85:5e:9f:
                    2c:fd:2a:7b:4d:8c:9c:57:95:54:f2:5c:20:5e:2d:
                    f4:29:c9:6e:a9:9f:57:5e:05:da:7c:d0:df:ff:95:
                    5f:3f:13:e3:b7:56:79:94:1e:42:db:a5:67:fc:21:
                    78:0f:a3:21:0c:e0:83:25:8f:e1:eb:be:46:95:a3:
                    22:c2:78:da:20:0f:d4:90:0f:5a:ef:b9:c2:6f:4a:
                    71:49:36:66:c7:89:f8:e4:ba:81:7d:79:e7:bf:fd:
                    c5:52:10:5f:8b:35:fd:99:26:0f:af:f4:6e:0e:3d:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:9A:61:95:50:D1:F4:2B:37:1B:DD:C9:C4:FB:88:7C:1B:F1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7ad5b3d8-33fa-3cad-9698-cd5ace9fe9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:61:e3:0f:4e:b9:f5:1c:88:38:42:8f:50:2d:be:3b:ef:cc:
         27:09:71:af:c3:12:04:be:81:02:37:8c:28:d2:6c:de:56:89:
         47:84:c2:5b:d6:09:b1:23:f4:0c:0d:cd:e7:86:be:cd:9d:98:
         7e:44:67:d3:dd:4f:87:c4:75:4e:d3:29:12:95:e3:9e:c0:36:
         e0:4a:4a:d0:76:d3:2b:e9:bb:12:d3:fd:42:41:73:28:7c:c9:
         40:11:f7:59:51:45:03:10:66:f2:fc:8f:8d:0c:37:8e:d6:8b:
         39:a6:b9:9d:20:68:93:f2:88:9b:34:c6:32:3b:ee:7e:58:4a:
         7e:fd:a5:b7:d3:91:3e:34:d3:45:a2:84:6f:b4:c5:ca:9e:23:
         f2:73:f9:b8:6f:87:54:c7:b1:62:40:c8:4c:75:1a:16:73:ad:
         b9:2d:d3:b2:ae:07:ed:2b:2d:1b:f8:01:79:ed:b4:43:11:8c:
         01:42:aa:b6:1d:00:01:4c:83:d1:db:98:1f:d1:9d:f6:1b:eb:
         d2:58:39:6e:30:01:d5:d4:14:da:d8:3c:46:28:7b:05:85:ef:
         e6:1d:14:55:68:b7:99:fb:8a:81:a1:c3:77:b1:c7:59:15:6c:
         3e:7c:42:e9:f5:71:38:04:17:56:de:f5:9e:9f:a3:77:85:e3:
         95:5d:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:02:12 2025 by rpki-client