Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/69fd3a40-069d-3203-a642-1c25de344467.roa
File:                     69fd3a40-069d-3203-a642-1c25de344467.roa (raw, json)
Hash identifier:          MaNy3KPlrHCJWLHMWnGXbTpFJ4N1WNLphmhW5imfRw0=
Subject key identifier:   A9:73:C2:56:6C:47:0C:D4:02:B3:00:5D:7E:B6:B6:6A:5A:64:22:1A
Certificate issuer:       /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial:       010D0C9F4328584A3FAAD412F5D8435B488EB0C0
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/69fd3a40-069d-3203-a642-1c25de344467.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     8987
IP address blocks:        2602:f702:222::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d4:12:f5:d8:43:5b:48:8e:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=a0f2ba0d-462b-47f7-9806-da92cf71418f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:e1:68:7f:ba:5a:f8:8b:8a:af:0b:74:d2:
                    94:e0:eb:b9:93:36:18:d4:e0:7a:2a:4b:2f:e7:ef:
                    1d:85:f4:02:3f:6e:07:49:2e:e0:4e:38:04:32:fa:
                    79:e5:e7:1a:8c:2d:f1:81:26:c7:1b:5a:5d:9a:65:
                    e5:bc:50:35:bc:2e:39:ed:7a:10:64:e9:c2:16:21:
                    fd:ee:6f:2a:69:f2:5c:11:41:ec:79:f9:1a:83:4e:
                    ad:14:79:53:90:f5:00:9f:77:44:5f:f5:a0:41:c5:
                    07:5b:0a:ce:4e:47:7b:ba:64:5d:55:c2:aa:6e:a0:
                    52:25:ca:47:07:9e:25:e0:eb:76:0e:f0:b0:93:80:
                    b4:d8:92:c0:f7:c4:1e:c5:8b:ce:b7:15:bf:67:12:
                    d8:00:e6:ce:9b:66:4a:f8:51:70:43:74:7a:43:fb:
                    c5:4d:32:79:54:c3:0e:4e:31:93:94:ed:42:a3:f8:
                    6a:a4:1a:45:32:5c:df:48:b2:d2:42:2c:26:92:6f:
                    d7:e4:2a:6f:45:38:14:dd:62:e7:83:04:0e:f2:3f:
                    94:7b:af:b8:a8:20:b4:f0:0e:90:7d:8c:1d:ce:36:
                    48:37:aa:17:44:78:62:55:7e:f6:aa:99:98:36:4d:
                    80:50:b9:09:6a:f6:c0:c4:c5:45:3b:44:8d:ba:bc:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:C2:56:6C:47:0C:D4:02:B3:00:5D:7E:B6:B6:6A:5A:64:22:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/69fd3a40-069d-3203-a642-1c25de344467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl

            X509v3 Authority Key Identifier:
                keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f702:222::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:e9:16:5e:6d:35:79:6d:25:86:1d:df:24:18:6f:30:e1:
         bc:b7:7d:01:c9:c2:2c:46:3b:4e:d7:97:b5:5e:35:ed:96:8d:
         24:72:da:85:c7:b9:17:5e:48:90:6d:cb:74:7e:00:ab:e9:cb:
         4d:2e:f0:2f:a5:02:13:af:59:15:b8:8a:92:0b:cc:79:d0:6f:
         28:1e:65:f1:04:e3:bc:2b:66:fc:46:42:59:da:f1:1e:3a:31:
         bf:79:90:8f:c7:c0:d7:19:56:b5:ae:8e:cf:18:f4:5c:13:cc:
         41:d7:3a:49:e1:d9:ca:ba:3f:6e:b4:81:2f:59:4f:e5:ef:59:
         51:2e:14:ad:27:28:7b:43:25:af:25:20:3f:53:71:cd:47:b9:
         40:08:11:d3:88:3a:24:cf:07:74:36:2c:70:53:bd:30:f0:a0:
         f4:bc:ee:42:b2:5d:78:06:7a:ff:f7:1f:33:2b:8a:b2:97:19:
         40:af:01:0e:b6:0f:d4:27:1e:ce:dd:a9:d7:21:76:3a:dd:45:
         a3:5e:cb:86:9c:c2:93:61:bf:d4:30:24:cb:2e:8a:20:1b:94:
         67:ee:59:c0:be:ba:d8:b9:4e:fb:11:7c:1d:f7:17:72:58:2e:
         42:3d:06:3c:d5:93:ac:8b:82:8c:1a:cb:05:4b:c8:e1:9e:88:
         f9:db:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:32:04 2025 by rpki-client