Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa
File:                     1c661a4e-30f2-3464-acbd-d88cf667907b.roa (raw, json)
Hash identifier:          YJfw0ZNhxVYCJlIW7gF0w79NgQKdXEE8PpUYCaJMEvk=
Subject key identifier:   E7:6E:E0:73:FF:73:B2:19:19:60:4E:4A:C8:57:FD:56:9E:A6:6A:CA
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584A454032B4086E2556217B5C40
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     3819
IP address blocks:        2602:f69a:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:32:b4:08:6e:25:56:21:7b:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=2d55080f-6acf-4c4c-a729-e9d32f22fd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:b9:9b:c7:d5:63:ed:8e:6c:84:c5:1c:7f:
                    0a:31:9b:63:ff:62:3b:29:fb:40:d2:5c:e6:af:ba:
                    5a:97:44:64:47:5f:12:58:48:a5:18:54:05:26:a7:
                    63:1f:e3:e5:08:db:5e:11:a6:15:51:69:e7:a6:bc:
                    d1:ef:e0:b2:82:81:42:b1:b4:26:68:44:3c:39:fd:
                    b4:ca:4f:f1:46:0a:a5:45:39:b5:73:90:e3:a4:d6:
                    72:91:44:d2:a9:ac:44:a0:de:50:a5:16:f7:b9:8a:
                    13:68:36:58:ae:92:8a:a0:e8:18:5e:5a:2d:7f:09:
                    c3:da:e2:a3:d0:75:71:7d:fc:e2:b8:5a:c3:05:62:
                    ce:24:c2:80:49:dc:47:b5:a7:d3:d1:16:22:25:24:
                    9e:c4:35:95:a2:5a:ca:e6:5d:62:55:2c:79:d1:df:
                    74:93:31:f4:56:ee:c5:e2:dc:fd:9f:82:80:8a:5a:
                    55:6b:43:92:32:d2:78:c6:fa:14:3f:b6:7e:53:e7:
                    91:ca:0f:2e:32:4f:43:92:52:44:55:b6:50:54:fa:
                    89:14:f9:71:a7:2d:70:a2:7f:ab:64:e6:78:25:ba:
                    ce:a8:2f:f5:3b:ea:c5:a0:47:73:51:ac:5f:b6:6b:
                    5d:46:bd:07:f7:c0:f1:10:d9:ba:5f:5a:2d:43:d3:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:E0:73:FF:73:B2:19:19:60:4E:4A:C8:57:FD:56:9E:A6:6A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:1d:9f:e4:c0:63:00:10:81:97:32:0e:af:bd:69:9c:ca:
         9d:9e:13:25:af:11:75:dc:fd:97:b5:66:85:1d:29:07:12:71:
         fb:b0:1b:26:94:00:47:f8:1f:10:9d:8f:95:c8:3d:7c:12:38:
         39:21:78:a4:51:df:91:3a:b6:a6:fb:8a:d7:b9:57:ba:7a:ae:
         90:8c:15:c6:ee:b0:65:77:86:d6:a7:5a:c1:54:57:36:b3:e1:
         93:78:98:10:ca:86:8a:98:d4:30:d1:db:3f:d1:f4:12:a8:d3:
         ad:6d:d1:6a:a5:60:cf:dd:dd:7b:19:10:98:4d:26:d1:a1:28:
         33:57:de:37:ce:ff:19:a5:bc:20:f9:79:af:1f:9a:64:08:7b:
         b3:8d:c3:b2:7b:c0:72:d9:67:f3:8f:9f:74:de:45:dc:48:52:
         a8:8e:db:df:5b:20:6f:c8:82:55:c3:5a:66:92:55:6f:f2:17:
         5e:32:89:df:48:60:97:49:55:07:0b:57:1a:98:de:85:b4:80:
         ac:b0:70:26:3b:f2:f9:cb:4d:7d:0f:02:bc:27:3b:61:d4:e0:
         2e:ee:c3:77:aa:89:02:b3:ed:f3:aa:48:29:6a:6f:67:4b:d7:
         55:32:0a:d9:01:4e:03:9e:e1:0b:2c:09:1d:26:b9:fc:09:a6:
         07:1a:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:07:34 2025 by rpki-client