Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
File:                     573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa (raw, json)
Hash identifier:          FwptclWc4MJbsBRHnYqFa4opBVgmX1bTY+uSreiNGFY=
Subject key identifier:   CA:A9:C8:BA:99:AF:F7:6D:44:63:21:B2:03:1B:26:8B:4D:70:C0:74
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584A38B03A1F567DF534C435B780
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
Signing time:             Tue 17 Jun 2025 13:01:05 +0000
ROA not before:           Tue 17 Jun 2025 13:01:05 +0000
ROA not after:            Mon 15 Sep 2025 13:01:05 +0000
asID:                     214483
IP address blocks:        2602:f756:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:b0:3a:1f:56:7d:f5:34:c4:35:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Jun 17 13:01:05 2025 GMT
            Not After : Sep 15 13:01:05 2025 GMT
        Subject: CN=514cc5f0-0df3-4303-ac61-3690c6043a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:7a:64:f7:07:66:91:fe:e8:5f:7b:e5:e6:
                    2f:a6:31:82:72:20:b9:7a:83:9f:86:a0:88:65:3a:
                    51:85:bc:99:b9:cd:1b:26:36:04:0c:72:f4:2c:be:
                    d4:44:59:3a:60:6f:2e:8a:26:59:ca:a6:9c:30:8e:
                    61:ce:fc:c6:32:93:80:c6:8e:76:aa:36:f6:5e:4f:
                    62:2b:a5:d0:a1:46:6c:c9:16:c8:95:15:2d:c0:32:
                    1c:ba:6e:56:35:fc:f0:1f:0c:77:3e:80:3d:a2:28:
                    79:01:b7:d6:4d:bb:a1:04:28:db:45:f0:15:c9:df:
                    66:82:15:bb:48:b8:c3:49:e6:b7:f0:75:55:e3:d2:
                    71:1c:95:bb:c7:52:c7:38:16:2a:db:3c:ec:14:74:
                    2d:17:9c:cc:04:30:64:13:8c:d1:25:15:b4:42:33:
                    ef:22:0a:00:7d:98:8d:6e:75:d3:44:3b:af:fe:19:
                    a8:30:70:7e:6e:44:85:e1:31:08:14:9b:16:4f:0c:
                    04:67:f8:17:df:36:de:21:73:94:0e:c2:89:31:d7:
                    7f:42:65:5e:cf:85:eb:58:a3:5c:94:b5:2d:cc:a8:
                    20:6c:08:8e:0b:63:05:9f:9a:dd:e4:f2:37:bf:87:
                    29:19:28:4b:1a:ad:d6:60:ff:73:26:bd:7a:30:62:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:C8:BA:99:AF:F7:6D:44:63:21:B2:03:1B:26:8B:4D:70:C0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f756:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:57:8c:43:ef:47:ff:7c:40:56:03:44:b1:92:cb:b6:c5:
         0d:db:c5:4e:b3:42:a4:d0:4e:cf:10:cb:76:5f:9f:7e:a2:17:
         c6:bc:03:e4:7b:cc:f1:5f:3d:38:c0:45:bc:44:41:4b:95:88:
         c1:bf:b8:79:83:c8:a5:87:83:a2:5c:52:a6:e4:de:45:ba:c4:
         bf:c2:8d:48:e5:f0:2f:96:3c:96:d9:23:74:74:95:21:02:3d:
         c8:ec:7e:ad:9a:58:af:64:69:c5:fa:86:73:fb:d9:56:4b:30:
         f8:a3:da:94:7e:c4:a6:23:d6:ed:6b:00:ed:ea:35:53:e0:28:
         09:ab:e9:34:47:bb:09:9c:ef:af:4d:bb:8d:f9:ad:71:af:63:
         b7:d3:17:26:c2:e9:bb:80:9a:30:2f:46:af:68:f0:3f:f6:21:
         c9:7f:e9:e4:cc:19:ae:8f:02:31:75:69:96:bf:13:e6:45:93:
         ee:fa:73:96:99:20:2f:f7:36:35:80:0b:d6:2e:ed:ab:67:ff:
         0a:5a:b3:a4:e3:d1:54:6b:fd:f3:98:e8:da:65:5f:1a:88:d0:
         b2:84:d2:85:0f:40:bd:96:9b:da:fb:b4:40:b3:8b:4e:44:62:
         f5:fa:34:2b:8a:dc:34:64:27:60:0f:07:d7:ef:91:42:ce:61:
         f4:78:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:49 2025 by rpki-client