Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa
File:                     ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa (raw, json)
Hash identifier:          4prDM/NbG0wjmJI6oKX/T0CQkPJiUXjOAfvcdDOiAG8=
Subject key identifier:   99:4F:98:CC:C8:47:99:87:51:B5:A0:7B:F1:6A:EC:82:C0:A9:CB:74
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584A3A1590B689D20CBDB0604900
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     47069
IP address blocks:        2602:f9df:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:90:b6:89:d2:0c:bd:b0:60:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b6758f12-8a8f-4ad6-870a-70a240bf6049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:cb:0e:fc:9f:2c:b9:4d:bb:e4:ae:ff:21:
                    b6:0b:72:32:fe:21:c5:8b:da:6e:fb:d4:fe:b9:92:
                    b6:c9:22:a1:dc:5a:6e:14:e8:c7:a1:ad:08:95:f9:
                    52:8e:4a:bb:d1:28:b6:a4:c3:38:05:46:24:e3:49:
                    52:05:d0:d6:20:03:2f:8c:e7:6a:21:32:39:c5:00:
                    76:77:ff:89:23:e1:b4:38:a6:3d:66:28:74:39:cb:
                    48:09:66:ea:b4:ef:57:59:d5:7e:71:fe:92:b3:1c:
                    8b:bf:58:22:36:6b:48:7a:6c:63:0e:63:6b:73:79:
                    92:65:60:bf:fd:9b:bc:c6:8d:9b:26:59:b7:57:27:
                    85:19:7e:03:00:5d:a3:b5:81:a4:54:19:97:94:83:
                    8c:b6:ee:a3:38:95:93:35:c3:59:6e:65:1e:e8:62:
                    7a:54:bb:4f:72:4d:3c:45:ec:09:b4:23:48:48:f5:
                    b9:ca:1e:3d:14:f7:fb:2d:2a:33:cc:bf:57:8e:ba:
                    b6:dc:e0:36:07:ae:eb:9b:dc:e3:f4:10:78:1e:7f:
                    c9:c7:47:64:05:45:c7:85:6e:74:ca:47:c6:00:e7:
                    5e:67:74:bf:5e:d0:3a:a9:23:04:0c:57:30:83:7a:
                    08:1f:63:22:9e:77:31:09:6c:ef:db:80:5f:2f:87:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:98:CC:C8:47:99:87:51:B5:A0:7B:F1:6A:EC:82:C0:A9:CB:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ac3797d7-8259-3ad5-8b11-01b99cd025eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6e:51:94:55:9c:62:61:a2:19:61:97:0a:46:c4:58:ef:91:
         26:1d:db:61:79:b9:cf:dc:f1:b6:b6:b1:6d:14:86:ad:f5:0f:
         5c:ea:75:8d:af:33:9b:35:fa:6c:9d:02:d0:22:fa:25:9e:bb:
         bf:a0:03:e2:ed:f8:9d:39:c4:da:2e:3f:06:8f:4b:42:8f:78:
         86:ac:08:87:b0:5e:50:ca:ea:79:eb:6b:1d:19:11:5c:a8:00:
         8e:5a:ac:15:f3:46:36:1b:73:04:a6:ef:74:12:30:d3:16:86:
         9f:65:b3:ac:08:6b:e9:80:56:c4:9a:65:2b:41:84:23:ea:84:
         99:83:32:04:d8:24:75:5e:28:6d:77:f5:2e:ae:24:60:3c:0f:
         6d:25:7f:e9:dd:62:a0:86:2b:f6:68:e0:cb:e3:8b:72:a0:f5:
         50:67:dc:db:af:c6:a2:c9:bc:da:f0:26:17:35:34:8c:bd:70:
         ef:74:42:38:09:7c:d9:78:51:22:af:49:74:8e:e5:55:59:59:
         24:6f:53:c2:07:e0:68:76:2d:ea:4b:1c:98:7c:97:c4:d4:10:
         dc:8f:b7:43:67:0f:6c:51:0d:67:86:51:2d:ce:dc:73:ca:4a:
         c5:a5:07:fd:d1:a6:98:1d:8d:e1:05:40:39:cd:3a:6b:cd:bc:
         04:38:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:54:17 2025 by rpki-client