Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa
File:                     42a64036-fbec-314a-b220-9b43893bfc8b.roa (raw, json)
Hash identifier:          ulDIbcQxsH0fOJtJxNrHYXm0AlcZIRv2GY4xuO9Amtw=
Subject key identifier:   8F:28:50:59:BC:45:96:F0:29:5E:64:95:E0:6C:CB:F5:FE:7C:8C:88
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584A4540359DF515D6371DE36500
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     39618
IP address blocks:        2602:fd92:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:35:9d:f5:15:d6:37:1d:e3:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=c81ef545-49bc-4994-8abd-fdf8d198e1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:99:60:83:79:25:ae:59:d4:46:10:64:a6:
                    4b:74:23:c6:fa:8b:1c:47:0b:ea:c2:dd:ce:6e:3e:
                    1f:68:74:b4:ad:0b:20:68:f7:e1:42:81:29:cd:e7:
                    c5:57:d9:92:1c:a6:57:8f:4b:b7:04:b5:54:bd:02:
                    97:c1:32:9f:b6:15:7b:ce:0a:23:15:e5:de:e4:c1:
                    6d:1e:eb:f8:c5:e1:73:e4:f1:b0:9f:ae:e8:1f:51:
                    37:18:56:ec:9c:fc:14:10:d1:47:6a:58:17:33:ca:
                    20:6b:bb:60:90:b1:b0:16:c5:70:4d:77:45:8b:f1:
                    86:db:46:9b:0b:18:56:34:46:a9:ce:06:8a:a2:79:
                    8c:0a:31:79:fa:fd:27:50:db:0d:20:74:fb:ee:1a:
                    85:4d:5b:53:3c:b7:38:4d:09:44:49:d2:59:08:4c:
                    22:ec:cd:b7:2c:c4:11:a2:02:e2:51:7f:b0:32:7c:
                    98:59:43:ea:18:b9:da:d4:2a:27:ff:4e:fc:57:ca:
                    2b:0a:a0:10:cd:47:cc:4f:da:d8:7f:92:50:e6:d3:
                    a3:cc:2f:7d:c6:c9:2f:03:96:c3:9e:ce:ae:c1:b0:
                    18:84:be:40:26:88:ec:4e:d3:1a:d8:48:27:10:bf:
                    95:d3:3d:48:16:92:d8:17:e5:a5:08:c5:1b:50:5c:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:50:59:BC:45:96:F0:29:5E:64:95:E0:6C:CB:F5:FE:7C:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/42a64036-fbec-314a-b220-9b43893bfc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:34:bc:67:cc:ec:e8:cb:d0:2c:b2:a6:75:18:44:83:36:
         19:a5:f5:6e:f3:4a:f6:f4:0d:50:70:78:d3:b5:dd:73:3c:93:
         06:8a:db:db:2e:c1:de:64:95:1a:e7:45:52:5d:b4:f2:b9:9d:
         cd:0a:7e:50:89:5f:39:4c:7b:de:35:bb:c0:a0:df:cb:7e:49:
         5b:5e:33:4b:a2:57:e5:ab:70:aa:c7:bb:6c:68:70:d6:8d:5d:
         cb:83:6f:d2:a2:a1:9c:5a:6d:1b:c1:4b:04:28:b7:21:26:88:
         2a:78:e9:27:00:87:4a:b5:a4:a8:d1:ea:a2:2a:24:b6:c5:7b:
         8c:2f:31:0f:b2:d0:bb:df:e0:3d:8e:a8:e8:76:7e:ed:75:17:
         d7:f3:af:f8:0c:8f:88:42:3e:e4:e8:0f:95:7f:ae:73:c8:a5:
         94:21:b6:bb:8d:78:38:87:6b:19:7c:d2:87:da:f0:2a:92:a0:
         dd:2d:25:f8:89:ee:0b:9c:0f:1e:80:0f:92:60:da:10:e2:23:
         4c:98:7a:8e:5f:66:ee:d9:c5:6a:43:aa:85:6d:b9:22:73:ce:
         a8:4d:a7:5c:c1:60:a0:3c:fa:07:75:10:f4:7b:14:81:8a:bc:
         02:5a:8c:e5:8a:99:1f:9f:7f:e7:f7:34:5f:e3:9a:49:89:e1:
         8c:6f:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:39:41 2025 by rpki-client