Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/c7c207c2-bd27-33ec-996f-cd7c568d79d1.roa
File:                     c7c207c2-bd27-33ec-996f-cd7c568d79d1.roa (raw, json)
Hash identifier:          suPCLlMmK4Z0nbEDFU0rslxiSfsnSDMYw5upqLftzdQ=
Subject key identifier:   AC:77:75:54:FF:0E:C6:9C:D5:6A:3A:73:B6:32:05:6D:D5:99:1D:15
Certificate issuer:       /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
Certificate serial:       010D0C9F4328584A3978DB35D65855529141C780
Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/c7c207c2-bd27-33ec-996f-cd7c568d79d1.roa
Signing time:             Tue 17 Jun 2025 19:45:21 +0000
ROA not before:           Tue 17 Jun 2025 19:45:21 +0000
ROA not after:            Mon 15 Sep 2025 19:45:21 +0000
asID:                     11715
IP address blocks:        2602:f6ae::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:78:db:35:d6:58:55:52:91:41:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
        Validity
            Not Before: Jun 17 19:45:21 2025 GMT
            Not After : Sep 15 19:45:21 2025 GMT
        Subject: CN=48e33897-fee7-42cd-8c3a-7ae65d445a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:ee:5c:2c:c9:cc:1f:1a:51:be:9a:e3:5c:
                    87:d6:5b:50:7f:82:f5:3c:ce:cb:64:3d:37:2d:c4:
                    98:c6:66:8f:b1:30:a8:de:3d:59:cf:7a:3d:c4:25:
                    56:b6:4f:5a:41:3f:18:75:3a:b8:f0:8d:32:2d:6e:
                    43:91:d8:60:7c:d3:7e:9d:e0:d5:94:69:81:1e:3b:
                    e5:bf:90:bd:23:ca:e7:21:c1:12:64:5e:7f:98:a2:
                    85:05:77:af:69:ee:59:36:12:4d:ac:7a:dc:91:3f:
                    2e:e5:45:7d:f1:1d:a2:2a:96:a9:ba:f2:b8:88:d8:
                    ef:bb:41:41:4b:bf:c0:eb:60:87:06:31:97:95:92:
                    30:f0:dc:eb:6c:48:da:0f:ee:05:41:b0:de:b5:54:
                    69:88:8d:b8:c1:0f:35:c1:f6:40:bd:c9:d9:71:fa:
                    f7:39:01:d6:a8:87:8f:60:e3:1a:59:24:2b:23:24:
                    c6:a9:ca:55:ab:59:25:59:91:8c:62:43:15:f0:13:
                    b9:61:b5:e0:60:18:6c:0f:cc:c5:4b:b4:fb:bf:b3:
                    23:75:1a:61:67:ee:3c:06:c7:ae:06:30:6c:f5:c1:
                    ce:ff:96:b2:2f:55:2e:4a:3f:a0:ec:cc:4e:38:57:
                    2a:38:f3:38:ee:77:fb:a5:ed:07:78:6f:32:bc:64:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:75:54:FF:0E:C6:9C:D5:6A:3A:73:B6:32:05:6D:D5:99:1D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/c7c207c2-bd27-33ec-996f-cd7c568d79d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6ae::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:31:91:74:ac:d1:69:57:49:c1:a1:6b:3b:d8:3d:d6:c3:64:
         ef:ef:f7:41:f1:61:cb:0c:43:11:aa:c9:dd:34:8d:b6:06:57:
         b6:14:04:ed:70:a2:3f:56:a4:f2:b9:0a:9f:2d:6c:b5:d8:38:
         8d:0e:57:78:57:5e:20:ff:d7:3c:29:9c:f7:58:ed:57:a5:c6:
         8f:33:2a:1a:66:bc:44:b3:74:ca:72:be:5f:94:9b:e3:57:ed:
         e1:a9:1e:05:68:bf:4b:2d:e2:25:01:a4:98:d8:4c:e9:31:ad:
         69:f1:79:28:71:7a:81:ee:76:7a:a0:53:06:c4:21:da:e9:cc:
         e7:8f:16:6f:50:2e:48:2d:53:01:e4:2f:9e:ed:d7:8b:e7:49:
         22:7c:c2:d0:c9:17:8f:41:ae:3a:69:2f:98:65:d9:fe:cf:cb:
         13:32:0e:d4:68:9f:8a:74:3a:0f:1b:18:fa:36:76:1d:ee:2c:
         d5:ef:25:53:65:4e:56:5f:73:bb:ba:26:2a:a3:c6:92:16:aa:
         83:0f:06:2a:e6:77:be:c0:06:66:9b:7a:35:70:5b:4b:a5:c8:
         e8:f4:e1:70:63:14:82:cf:4e:6a:97:67:48:86:ab:35:12:01:
         d2:03:72:ba:11:f5:16:0b:3b:7d:51:96:a4:a2:59:11:b5:c7:
         48:7a:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:35 2025 by rpki-client