Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa
File:                     ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa (raw, json)
Hash identifier:          bWe9eBjYy3Vp3GJDgB37Ml9/YxU/KOFREVve2eH46ro=
Subject key identifier:   A6:12:3B:15:9E:98:51:C4:4D:28:A7:29:D8:9E:35:25:86:51:4C:26
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285849C904EA06177982FC65A84E20
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     203283
IP address blocks:        2602:2db:110::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ea:06:17:79:82:fc:65:a8:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=bbb8d2ea-9f90-4526-915e-ad72244db851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:7b:a6:e1:6c:83:61:c8:36:61:39:c9:8f:
                    1c:d2:60:02:f7:b2:bf:4b:3a:82:c4:d8:78:8d:b5:
                    3c:20:3d:60:35:fa:49:ff:c2:04:0a:15:f9:06:58:
                    9c:b3:61:5a:53:66:cb:42:b4:fb:85:bc:04:ba:08:
                    f6:45:69:85:3e:a4:8f:80:90:64:79:1d:01:6c:1d:
                    f5:54:f4:e8:b8:ca:6c:05:8e:0a:6a:da:c6:16:87:
                    83:13:df:49:d2:22:06:bb:e7:fa:f0:2e:95:2c:58:
                    1f:17:42:f6:29:8e:72:c7:9f:ee:63:7d:a6:bf:57:
                    7b:c4:7d:64:8b:5d:87:f2:b6:ba:f7:29:db:f2:6c:
                    e6:b7:30:03:ef:4b:e1:37:a7:0e:28:49:5e:ba:64:
                    56:19:db:02:2c:71:7d:01:e9:3c:11:8b:fb:f4:bd:
                    3a:5c:95:c3:88:a6:99:3c:f5:a1:53:ca:8e:b9:95:
                    1a:b8:6c:9c:e4:bf:01:2e:20:a8:cb:98:18:e5:e9:
                    84:e2:eb:ce:f8:5c:ad:b1:6b:b5:3c:92:1a:f8:35:
                    17:14:e1:0b:3f:a3:69:67:99:af:b6:b1:6a:f9:a0:
                    f9:09:ee:54:ad:e4:47:62:bc:42:b2:3d:cb:d2:1c:
                    2e:5e:c1:be:93:e0:c1:8c:26:a6:25:b7:35:8c:8b:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:3B:15:9E:98:51:C4:4D:28:A7:29:D8:9E:35:25:86:51:4C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ff44e593-bcbc-3a4f-a581-2db78b5f8910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:110::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:41:90:a6:fb:75:0c:a7:4a:76:89:f8:1f:20:03:fe:d0:76:
         da:e7:3d:1c:7e:4c:79:db:ae:1e:dc:e2:37:7e:c9:3c:e5:3d:
         ce:89:e0:b2:71:c4:7c:a9:fd:39:78:c7:d8:74:1e:0f:47:9e:
         75:1e:75:e2:cb:c1:74:d1:2a:7c:01:6e:01:3d:6b:8d:6c:0d:
         70:7a:14:fd:7c:8d:79:99:76:df:5f:10:a1:7a:3a:62:a7:35:
         11:62:62:9e:b5:8b:8d:65:ae:27:73:0b:47:13:ec:7d:66:05:
         2d:e8:5b:5e:19:83:a2:a1:12:94:64:cd:6c:c0:60:c5:f5:92:
         7a:bc:06:a7:f7:70:fb:c6:5d:8f:2b:ff:b4:52:11:dc:35:6f:
         b9:75:80:72:07:20:ef:46:53:a2:d0:24:42:80:56:49:a3:8e:
         b8:99:9a:b4:38:74:1d:f3:50:db:c2:0d:ba:74:3b:15:e5:c6:
         77:3c:e2:41:2b:96:be:5b:0a:80:ef:a9:17:58:d7:79:05:ef:
         49:16:a3:80:43:bf:8c:3d:53:0d:ba:51:b5:96:f0:68:fc:67:
         d6:c7:09:8e:3b:05:ae:6f:50:4d:7a:d6:b5:22:93:6e:89:e3:
         05:fd:e3:66:50:49:c6:09:56:5b:4e:28:54:bb:0f:90:77:58:
         be:09:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:13:48 2025 by rpki-client