Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/2049d6c4-a65f-3834-bb10-f13ff973b3a1.roa
File:                     2049d6c4-a65f-3834-bb10-f13ff973b3a1.roa (raw, json)
Hash identifier:          w/HyUMLY4U4LemV0CgGJMMw5gKo+JmkDKaK2d4cVpSY=
Subject key identifier:   6C:77:C6:6F:34:42:5E:CB:EF:9E:89:07:31:D8:8A:C4:3B:54:97:2D
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F4328584A51D0734B6EAD687A88068180
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/2049d6c4-a65f-3834-bb10-f13ff973b3a1.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     149020
IP address blocks:        2602:fa08:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:73:4b:6e:ad:68:7a:88:06:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=aa4ae9f8-402e-4df2-945f-a20f0e2b6ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:73:de:7d:fa:c5:54:67:37:78:d8:5f:e7:
                    c4:0c:f7:e2:d7:01:fa:f5:8e:07:d6:91:54:47:ad:
                    fc:65:d7:f9:5d:e7:ec:18:77:8a:d0:10:f7:00:ef:
                    a0:e8:7b:ab:6e:01:41:30:d2:66:6a:66:7b:90:06:
                    aa:65:fd:36:a6:f8:cb:10:63:96:34:86:04:df:ae:
                    54:41:3e:18:eb:8c:a7:15:5f:3f:bd:29:c2:97:98:
                    8b:78:3e:63:4a:9d:c4:85:9f:3e:82:47:36:7b:73:
                    4e:bb:a5:1e:62:8f:47:8d:02:1f:98:d0:a6:b3:87:
                    6d:f5:1e:f0:5e:c2:23:e9:ff:aa:18:40:03:0d:b5:
                    ca:82:e9:e5:96:9c:d9:e3:d0:ca:ac:55:e5:f3:0d:
                    03:1a:e0:c3:75:f7:6c:72:3f:e9:08:b0:a3:2d:9f:
                    11:be:d9:61:c2:e7:71:3b:18:87:64:9e:76:3a:4c:
                    50:77:2f:5c:f5:8d:82:32:cc:83:88:11:9c:08:e6:
                    00:1b:87:7d:bd:8d:d6:41:e6:09:a2:2d:2d:28:c9:
                    47:c0:bb:56:05:53:48:5d:79:38:26:ab:45:2a:ec:
                    00:04:fc:98:90:75:e2:96:49:0a:6d:d0:01:59:b6:
                    fb:91:0b:11:1d:cb:31:72:28:b8:8a:f2:c1:41:e5:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:C6:6F:34:42:5E:CB:EF:9E:89:07:31:D8:8A:C4:3B:54:97:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/2049d6c4-a65f-3834-bb10-f13ff973b3a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:c9:21:f2:a3:31:8d:7e:c8:8b:3d:29:43:6b:c9:15:4e:
         c8:45:a3:23:02:73:d3:29:34:44:36:92:3e:ee:5d:17:10:83:
         c1:75:37:67:93:5f:86:ff:52:ca:94:59:f9:5a:e3:2e:1c:9d:
         c3:26:0d:61:76:13:86:a4:0a:30:a9:43:98:50:46:7a:5b:b8:
         26:2a:f6:15:ee:6a:47:96:83:32:9e:7f:20:a4:d5:39:bc:10:
         06:80:76:02:78:7f:e9:46:ff:c9:8d:8c:56:11:7c:af:d8:8b:
         38:48:49:6f:3e:60:f6:ec:bf:29:49:97:9b:8f:ea:af:58:d9:
         30:ff:f0:6c:7b:ba:b1:05:74:ff:6a:06:33:79:47:4d:45:0f:
         33:9f:5f:88:18:b4:33:d0:d4:02:df:d1:06:ad:3d:ad:a3:a7:
         28:63:98:30:00:23:e6:02:e7:86:08:d1:cf:77:92:4c:8b:6b:
         d7:18:dd:b4:c1:b9:cc:49:33:89:93:bb:da:1d:4b:b0:6c:fd:
         cd:73:35:08:af:41:56:50:83:2b:70:bd:de:5d:a1:f6:8a:47:
         e5:36:b3:dd:7e:7e:ba:61:21:82:c1:18:31:c6:dc:ca:84:47:
         1c:09:d1:e7:fb:89:39:5d:f3:92:1e:3f:3c:f1:f3:9f:10:ef:
         9a:b0:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:29:20 2025 by rpki-client