Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6a4cfc0e-9212-37de-8bb4-64b834c756f1.roa
File:                     6a4cfc0e-9212-37de-8bb4-64b834c756f1.roa (raw, json)
Hash identifier:          Eh0ikkinR5D4d+jwTwwCVmTC33Qd/ST3JiVXa9drges=
Subject key identifier:   30:6A:30:3F:5B:55:97:C4:E2:A0:C4:E7:06:21:B2:B1:1C:DB:FC:46
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F43285849BDDA2B50167D121ED4C2DF00
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6a4cfc0e-9212-37de-8bb4-64b834c756f1.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     399275
IP address blocks:        2602:fcc0:9999::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2b:50:16:7d:12:1e:d4:c2:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=59f5bda8-d600-470a-9c53-f2dc7f576fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:15:1a:f7:59:e3:c8:27:14:96:5b:87:cd:
                    91:1c:f8:29:65:ed:6e:00:4f:cd:a0:1f:d8:48:f0:
                    96:b3:35:8d:dd:27:06:0d:07:92:d8:18:55:55:27:
                    52:6a:20:ea:76:8d:7b:9d:67:85:4b:ce:6b:26:fa:
                    cc:48:eb:fd:f6:c3:51:73:ed:de:bd:b8:40:01:92:
                    d0:d3:91:16:3a:29:0f:2c:53:76:01:be:0f:5f:69:
                    71:b4:52:52:e5:7d:05:63:53:86:d0:de:54:39:3f:
                    e2:2b:1d:c6:23:36:00:43:8a:56:f3:30:a2:c9:cc:
                    86:6b:02:e6:9e:60:a9:94:20:75:86:94:79:09:4a:
                    bb:e7:2b:6f:67:52:44:07:40:92:8b:ac:b9:e4:a7:
                    df:cc:8d:f4:27:ba:8e:21:70:d8:f8:a9:7f:4d:e0:
                    ff:2d:f6:e9:c7:b6:26:b5:83:e3:9e:39:6c:83:58:
                    78:a3:64:fb:ff:1d:41:47:de:8d:70:53:3e:9f:4b:
                    5d:a8:7f:13:13:c9:88:e9:85:47:f2:02:a6:9d:48:
                    c5:42:e6:bf:8e:01:50:60:8c:73:c4:c4:22:ff:d0:
                    e4:f0:5c:98:9a:38:c4:35:51:86:8f:82:8e:5d:3c:
                    85:1d:57:68:f2:34:10:79:be:dc:6c:42:89:29:7f:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6A:30:3F:5B:55:97:C4:E2:A0:C4:E7:06:21:B2:B1:1C:DB:FC:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6a4cfc0e-9212-37de-8bb4-64b834c756f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:9999::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:17:55:95:33:47:c5:e7:5d:a6:b3:ec:8e:33:34:7c:54:0d:
         74:0c:c4:e3:16:8b:3c:47:d4:c7:3f:f2:92:91:e7:30:7f:0d:
         2a:ed:16:09:e8:a6:60:a8:ff:38:41:a2:9f:4e:2c:5f:9d:a5:
         be:e2:00:d2:fb:68:91:71:a0:a8:39:d6:ab:ea:fa:6e:50:a5:
         52:5d:08:42:fc:83:25:12:40:55:30:e1:64:c5:12:26:54:f1:
         86:6c:09:84:47:19:f1:57:12:42:b5:90:e9:96:1f:6e:2c:ac:
         72:0d:98:1a:dd:74:e1:7f:40:08:2c:4d:bf:03:5c:53:16:2a:
         9b:1b:29:a8:43:51:78:95:fc:7d:53:f4:63:4e:40:5d:aa:04:
         45:8a:32:fd:71:a4:8d:9b:b9:25:14:f1:d5:31:34:19:b7:48:
         89:a5:04:f4:58:64:03:ca:b9:62:2e:a1:fe:59:93:f2:4f:5a:
         5c:e5:92:95:f1:87:48:f8:e7:bf:aa:10:56:07:17:af:90:b0:
         95:bb:7a:64:04:f3:cb:34:df:0e:3b:65:8c:7e:8e:db:69:2a:
         d8:52:86:24:d8:1c:47:c2:cb:fd:0a:57:0f:ca:41:8e:d8:c0:
         4b:34:bb:2d:95:5a:14:7a:d0:f3:0d:0b:a3:58:ac:f7:15:0c:
         ab:b1:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:35 2025 by rpki-client