Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa
File:                     460e511a-a065-33a4-9b94-66aaa249410b.roa (raw, json)
Hash identifier:          JYd0YoWs5SZN/xVlGm6N8eZOZR08Qwo4iiIoH3iRFEs=
Subject key identifier:   21:C8:D6:B2:E1:28:17:92:38:81:EF:66:7B:6E:CA:4B:BA:3A:F2:0A
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584A5DD33A633EA3085E7F98E720
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa
Signing time:             Mon 30 Jun 2025 20:16:32 +0000
ROA not before:           Mon 30 Jun 2025 20:16:32 +0000
ROA not after:            Sun 28 Sep 2025 20:16:32 +0000
asID:                     398338
IP address blocks:        2602:f605:100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:d3:3a:63:3e:a3:08:5e:7f:98:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: Jun 30 20:16:32 2025 GMT
            Not After : Sep 28 20:16:32 2025 GMT
        Subject: CN=fc0aca87-c0bf-4ca2-bbbc-cbc63e4f13c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:cf:48:39:9b:e7:8b:f2:99:1a:ad:17:98:
                    97:64:10:22:65:6b:91:bb:4b:9d:c9:2b:da:a1:d9:
                    6b:15:9f:e8:48:f0:b8:c2:a5:5b:ea:dd:d8:d5:1b:
                    10:1b:a3:92:ad:c2:07:9d:80:4d:da:4e:84:64:30:
                    68:39:7e:90:96:0a:b8:bc:0e:ef:a8:dd:c0:1e:01:
                    42:5a:51:f1:28:ab:fa:fc:e3:4e:1c:98:21:8d:d6:
                    52:3b:29:ee:d4:24:2a:4c:cf:15:02:d0:5d:7e:55:
                    bc:37:33:3d:1a:20:19:23:1f:9c:e2:b2:1e:e3:9d:
                    cd:a5:6b:3b:e6:7d:f9:3f:36:96:31:e4:f7:cd:9a:
                    f2:7c:28:e7:14:28:c2:86:47:12:33:71:5f:eb:56:
                    0f:ed:05:41:1f:13:c2:2d:08:ea:e7:fd:d1:c4:e7:
                    f5:75:d1:57:e7:6e:fa:ab:ad:53:e4:c3:5b:6f:a4:
                    b5:f7:c8:44:be:c0:ae:d8:b3:47:4e:c0:5a:9b:37:
                    47:58:16:a3:c0:11:ea:7d:1a:73:f3:4f:7d:17:02:
                    c9:c2:39:db:d0:6a:3e:06:51:2f:79:a6:28:d9:c9:
                    66:64:e4:5c:8f:cc:fd:a0:ad:65:73:2d:8a:e3:fb:
                    89:dc:e9:81:a8:94:8e:69:70:90:fa:00:df:3f:3d:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:D6:B2:E1:28:17:92:38:81:EF:66:7B:6E:CA:4B:BA:3A:F2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f605:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:35:af:f9:db:a3:0a:ac:f5:76:3e:41:9d:90:1c:4f:e6:
         26:d2:d1:1f:58:b8:2b:9a:c5:1a:61:ca:c5:43:56:28:60:45:
         74:74:b3:cc:80:47:05:d4:b8:48:47:c4:e0:4b:81:2f:db:5d:
         17:19:42:2b:e4:38:bf:92:5b:8c:7d:5a:c7:9a:64:82:33:9d:
         6a:06:fe:1c:4b:54:c7:e7:c7:c1:68:3a:ab:27:27:eb:c1:bd:
         79:1d:42:3d:72:b9:d6:29:64:cd:b8:35:e9:b5:36:31:fa:1f:
         70:0a:45:c5:64:9e:45:1e:c0:df:8c:d8:6e:3b:18:01:09:4c:
         3a:3a:bc:a4:4a:02:30:15:4e:5d:16:54:86:a5:87:4d:95:fb:
         3b:30:1a:6c:62:ff:46:32:30:83:4e:c1:11:4e:52:ea:f6:17:
         cc:1e:a8:97:0f:b4:a6:8f:08:2c:30:e3:b1:a8:c9:28:5a:cc:
         05:b4:b3:98:27:33:66:bf:b1:ca:74:27:39:76:9a:51:13:37:
         0c:4d:f7:7b:ba:53:f2:82:60:60:8b:59:fc:d5:af:62:e7:17:
         8f:d7:84:a6:60:8a:f9:a2:51:56:da:cb:2c:ff:5f:37:57:57:
         79:4d:45:50:52:28:81:95:8e:ff:f5:c0:3e:8c:8f:fa:6a:c7:
         ef:f2:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:19:12 2025 by rpki-client