Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/77cf3a71-247e-3818-954a-e0215ea89684.roa
File:                     77cf3a71-247e-3818-954a-e0215ea89684.roa (raw, json)
Hash identifier:          e2wq+ILuoq5su+gH+tS4MjAz1mtPyRblcRciSAb/LVw=
Subject key identifier:   B8:76:43:EA:06:66:26:4A:46:02:C3:59:D9:5C:5C:44:86:FD:84:12
Certificate issuer:       /CN=28bcdc0d-33ef-41a1-80e6-3968d6811502
Certificate serial:       010D0C9F4328584A59296D8A31667FB68EC10880
Authority key identifier: 9D:D7:74:1E:F9:31:A2:6B:42:1B:2D:4E:C4:A4:10:72:1A:AD:63:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/77cf3a71-247e-3818-954a-e0215ea89684.roa
Signing time:             Sun 29 Jun 2025 04:11:11 +0000
ROA not before:           Sun 29 Jun 2025 04:11:11 +0000
ROA not after:            Sat 27 Sep 2025 04:11:11 +0000
asID:                     20447
IP address blocks:        2602:f606::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/28bcdc0d-33ef-41a1-80e6-3968d6811502.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/28bcdc0d-33ef-41a1-80e6-3968d6811502.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:59:29:6d:8a:31:66:7f:b6:8e:c1:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bcdc0d-33ef-41a1-80e6-3968d6811502
        Validity
            Not Before: Jun 29 04:11:11 2025 GMT
            Not After : Sep 27 04:11:11 2025 GMT
        Subject: CN=e4d45684-4aba-4846-9a66-dd365ce5ff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:77:7b:13:66:68:78:e0:f2:cb:5d:23:f5:
                    66:0d:47:8d:4c:2a:2d:96:44:d1:6d:e6:f3:fc:a6:
                    39:a7:a8:78:26:9f:8b:64:e5:30:90:fe:19:98:82:
                    c3:ca:59:a9:6b:c2:25:0e:ac:18:48:42:c0:92:6b:
                    3a:4b:18:a9:81:5b:76:fd:58:bf:06:46:85:4d:41:
                    a3:95:1a:cb:fa:51:5d:9d:14:1c:54:88:ac:39:9a:
                    5e:01:58:65:a5:9f:1d:67:16:c4:7d:c8:23:c3:b4:
                    95:4b:bf:15:a3:f0:83:1f:92:41:42:e1:a2:e2:0e:
                    3d:aa:af:62:92:d4:ce:fb:7d:35:6c:7d:3e:9a:1e:
                    33:50:d5:93:5e:33:8f:85:f1:13:0a:0a:4f:04:87:
                    61:1a:8e:96:93:54:cf:15:9c:52:26:d6:d0:21:5b:
                    ac:a7:83:4a:61:b0:bf:6a:8e:af:c3:4b:4a:85:24:
                    81:cb:2a:d8:fc:b7:16:c8:2f:0c:07:85:ea:2b:e2:
                    fb:a1:26:27:e9:2d:43:0c:d7:f4:4c:15:3e:ea:66:
                    72:91:41:c3:50:53:ce:3e:c2:f1:0c:ff:7f:8a:f6:
                    fb:79:6d:cc:ed:dc:00:b4:85:a4:03:4e:e3:bc:00:
                    26:50:bc:8f:8f:be:cd:9a:05:b1:0a:d1:3a:b6:c9:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:43:EA:06:66:26:4A:46:02:C3:59:D9:5C:5C:44:86:FD:84:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/77cf3a71-247e-3818-954a-e0215ea89684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502/28bcdc0d-33ef-41a1-80e6-3968d6811502.crl

            X509v3 Authority Key Identifier:
                keyid:9D:D7:74:1E:F9:31:A2:6B:42:1B:2D:4E:C4:A4:10:72:1A:AD:63:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/28bcdc0d-33ef-41a1-80e6-3968d6811502.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f606::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:19:55:9c:00:68:d3:29:db:d0:90:f0:56:6a:a2:18:f9:d9:
         0a:b5:75:27:41:18:34:e8:e6:cd:6d:83:ac:36:6c:f7:5a:75:
         e7:e9:b2:94:3e:1d:73:db:2e:c9:28:38:70:21:0c:72:79:3a:
         88:ee:f8:b7:69:87:64:e2:31:8d:d7:cd:ad:ae:93:55:b9:bd:
         d4:ba:57:29:e5:b7:38:11:cd:06:8b:a9:37:58:d5:97:39:8e:
         b7:92:b0:5b:0c:c7:75:91:f4:a9:c4:7b:a1:7a:b3:b1:9a:51:
         af:cc:cc:33:a3:28:03:1f:ff:73:3b:8d:31:f7:65:5e:10:97:
         be:86:e4:37:28:94:c8:4d:7c:c2:06:7d:ad:ed:cc:66:cd:76:
         ab:b1:c3:2f:40:d5:16:16:93:fd:c9:46:90:fa:dc:f8:47:11:
         61:9e:a7:7d:01:47:09:9a:a4:2c:c9:20:1e:29:68:f0:fb:dc:
         9b:a3:e4:e9:58:00:01:45:96:36:6d:db:6e:d0:d0:1c:7f:63:
         e1:17:ca:16:0e:fc:0f:e5:c6:d9:70:bb:d0:42:a7:6c:0f:19:
         42:73:c6:57:b2:f5:3d:9e:f5:7b:94:00:25:c0:c0:6b:b8:ff:
         bc:40:7e:5b:2f:0d:9c:a6:1e:0c:ff:92:03:54:06:76:b0:7f:
         bb:e7:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:35:53 2025 by rpki-client