Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa
File:                     6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa (raw, json)
Hash identifier:          xwXtgngsuXle/sG/jIOjFDIBVFrr3Da5v5w39+g4QNI=
Subject key identifier:   D5:1D:A0:88:DB:60:DA:00:AF:FB:CA:8F:25:91:69:ED:CB:D9:D5:42
Certificate issuer:       /CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
Certificate serial:       010D0C9F43285849E2251E39535CF3DB8F33CBD0
Authority key identifier: 4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     33385
IP address blocks:        2602:fc60::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1e:39:53:5c:f3:db:8f:33:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c490fd24-dd57-48e7-8353-4fc4faeef5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:56:c8:a9:6a:e3:d4:d6:35:b3:b9:41:42:
                    ef:ff:ef:c3:84:6a:da:2d:e1:41:c1:cf:43:cf:2d:
                    0b:d5:1f:13:da:ce:42:ae:3b:13:b3:6f:d8:aa:e8:
                    39:b5:b2:29:43:65:50:3a:78:71:0c:6a:72:1e:4c:
                    f9:f6:78:8e:b6:11:f6:c0:8a:18:d3:10:db:48:68:
                    ff:0c:98:85:f6:d4:2f:20:89:15:6b:f8:33:ec:11:
                    de:d6:76:76:00:53:72:ca:2b:4d:0b:c6:cf:dd:79:
                    bd:87:ee:85:56:8b:dc:d0:bc:6d:d4:b8:6f:ba:1c:
                    57:32:67:5f:21:50:17:5d:6e:ab:34:c0:c6:e8:34:
                    34:6b:ee:0c:34:71:c6:eb:71:b6:fc:c7:5e:51:57:
                    f2:99:b4:b2:aa:00:be:96:1c:e0:b3:38:7e:31:70:
                    54:c7:81:b7:2c:dd:a5:9f:bc:70:93:f1:3a:17:0c:
                    6a:0e:fb:ae:95:fe:85:34:c5:aa:5d:a9:29:92:10:
                    f8:b2:6c:cd:ce:33:6f:9c:3a:b2:41:96:20:93:01:
                    7f:91:e3:8b:6e:06:35:79:5b:09:8a:ba:d3:32:f3:
                    fc:f5:d6:d2:87:21:d2:92:01:2e:39:10:c9:87:42:
                    e9:c9:44:9e:5b:c7:15:df:6f:99:fd:d8:b1:a0:3f:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1D:A0:88:DB:60:DA:00:AF:FB:CA:8F:25:91:69:ED:CB:D9:D5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc60::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:ea:59:7b:91:41:38:39:67:e2:59:0f:bb:07:ec:e7:10:
         0d:9a:1b:71:15:f9:2f:c4:c1:9b:4e:a0:6e:64:ac:49:1b:d4:
         20:d9:e6:16:da:b5:b0:44:e3:87:a0:b3:a2:df:2d:6e:bf:d2:
         65:af:2c:fb:eb:ed:00:b5:90:75:a1:14:aa:57:05:4e:16:69:
         75:8d:25:5e:86:1b:df:2a:13:66:11:a1:80:55:6c:9e:0c:6c:
         2d:99:c1:03:4a:1f:ee:8f:61:6b:d0:c1:d8:3f:c1:6e:0b:5a:
         f5:90:9c:e6:ff:7b:91:f5:17:96:d9:3b:68:4a:d4:39:84:f9:
         ff:d1:e2:eb:2f:c2:9f:07:54:c2:9f:ff:51:d4:4a:b4:21:d6:
         a5:63:f5:2d:50:b4:d0:1d:9e:eb:b4:c7:e0:9c:d0:53:7b:46:
         20:80:f0:6d:a5:f6:77:f2:95:c3:fc:90:8f:21:89:a7:d0:6c:
         1b:dd:f2:15:16:e7:9b:43:12:bf:db:7b:03:a7:d4:9c:9a:d8:
         6d:15:b3:c4:27:d1:dc:be:83:bc:8c:72:0f:f3:58:3d:2e:4e:
         50:c0:27:f4:96:39:49:b6:8d:65:25:55:2e:f8:8f:1a:78:4c:
         a8:58:47:2a:89:0c:74:02:b6:36:18:da:5e:05:9b:f3:aa:f9:
         fa:70:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:47:19 2025 by rpki-client