Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
File:                     100bd445-11b8-324b-bf41-5a5c61b7658a.roa (raw, json)
Hash identifier:          vYBhcTPE6qk7h0SguWtZ74Ns1WotEf/2xUltBTsPcBw=
Subject key identifier:   4C:85:20:68:D4:A8:5B:53:A2:AB:E3:F0:3D:68:67:C7:83:45:A0:28
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584A5B95AAB22568CD5967130C80
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     46386
IP address blocks:        2602:f700:c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:aa:b2:25:68:cd:59:67:13:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=15f30a8d-6e3e-438e-9f0b-fa6fac093f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:14:68:19:c2:44:c9:f0:0d:2e:af:e5:48:
                    2d:d0:d0:26:c7:99:2d:68:e7:e8:3f:8f:72:ab:d5:
                    0a:cd:9a:50:e6:bb:e4:11:8f:9d:91:87:fd:3e:56:
                    76:ac:8c:fb:60:da:eb:a8:fc:c0:4e:e6:8a:cb:74:
                    f8:36:a4:c7:8f:0d:16:9d:82:22:47:78:89:d6:ca:
                    c1:9e:ba:66:f1:51:d1:70:4e:03:49:ed:52:d7:83:
                    46:f0:e1:96:41:6b:b2:cc:4b:56:fd:c9:b0:81:e3:
                    da:63:93:e8:42:c6:4a:23:1d:14:52:07:0b:f9:ba:
                    45:8c:4c:f2:22:6e:4c:8d:88:f8:79:88:7e:88:0e:
                    81:1a:5c:20:bc:30:14:c6:d5:5e:2f:7d:d9:7b:4f:
                    15:dd:d6:b4:9d:51:5c:e9:61:0f:b8:23:82:01:0d:
                    3b:53:8d:ec:9f:be:19:14:56:8f:54:31:30:94:13:
                    26:04:2c:67:cf:2c:73:3a:22:86:97:31:af:33:e5:
                    f8:3b:21:db:dc:d8:26:4c:8c:b6:18:8d:d3:df:e2:
                    8b:12:45:ae:92:7a:a3:99:0f:75:5c:05:f7:56:41:
                    f6:be:04:e3:e8:d6:4b:73:d9:3a:5d:62:fd:95:d0:
                    cc:4f:81:42:0b:0a:54:af:74:ef:7d:20:d7:9f:6d:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:20:68:D4:A8:5B:53:A2:AB:E3:F0:3D:68:67:C7:83:45:A0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:c0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:d2:bb:9a:3f:bd:23:16:56:7b:a2:f5:89:a9:c6:87:cb:
         bf:88:54:35:0c:40:65:7f:02:c6:fa:21:d6:d6:ee:0b:bb:73:
         92:38:d7:53:fb:b6:91:43:23:bf:26:e0:22:ea:2d:45:4d:7b:
         c5:50:d9:f9:1b:f7:33:3e:52:04:64:e2:42:8e:b0:66:8a:5e:
         bb:13:a1:81:20:b5:53:fa:e6:a6:18:27:6f:eb:3e:b2:93:25:
         cf:32:01:70:79:5b:87:a3:4e:3a:dc:a4:87:b2:83:bb:90:4e:
         27:b0:54:3c:77:2d:95:a4:5d:25:14:f2:04:65:a2:45:82:1b:
         ff:68:1f:06:54:6a:7b:ab:fd:61:e6:b8:9e:e3:97:ca:e0:d0:
         1a:08:03:7d:05:a1:c5:77:3b:8d:3b:ba:a6:56:01:73:19:2a:
         e1:a4:c8:2c:9b:5c:57:d7:63:d4:41:bc:a5:39:a1:fd:e1:fd:
         0c:d5:e8:bc:5c:a7:81:19:a1:0a:d3:7d:e3:0d:58:95:e2:63:
         10:7e:0b:60:b8:9e:94:4c:10:65:f9:15:a9:66:69:ae:d3:4b:
         ba:4f:4d:81:64:9f:39:71:f9:f9:04:f2:d7:fb:94:9b:7d:22:
         1c:41:4c:ae:fc:c0:c2:e9:48:ac:90:aa:dd:3c:f0:61:89:bc:
         5d:ed:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:35:30 2025 by rpki-client