Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa
File:                     1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa (raw, json)
Hash identifier:          CXHqkesJd5+45d36RjLy+ekEWjRmjNnEBydOAIrUEEk=
Subject key identifier:   C7:0D:4C:DC:4C:5F:0E:5C:5E:92:5A:9D:2F:70:2D:16:3A:BE:04:7D
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584A29555A007B098C19720A8560
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     11832
IP address blocks:        2602:f6b1:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5a:00:7b:09:8c:19:72:0a:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=91123186-4127-4de8-b963-7faffb26156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:da:be:8d:7d:98:70:0b:13:df:8c:38:21:
                    3f:b2:09:cb:d7:e6:a3:b8:a4:de:78:c5:31:c2:e2:
                    95:59:ae:d6:96:50:22:16:9e:e1:6b:e5:be:46:99:
                    29:ec:59:ab:f0:fd:e1:b6:5e:5b:85:22:96:77:47:
                    94:e7:1f:f6:f5:02:0d:a3:f6:a7:69:dd:18:2c:82:
                    93:b6:f4:af:b9:a2:18:7b:7c:35:e9:35:dc:d0:a3:
                    85:ae:f7:26:bd:78:36:7f:da:a3:b5:dc:5a:60:38:
                    1b:aa:e9:a1:c5:65:3e:ab:ec:0e:e6:6f:6e:f0:4b:
                    aa:fc:17:82:42:78:bf:aa:48:67:80:80:7e:eb:9c:
                    1d:c7:1a:e8:8b:21:cb:f1:a8:04:03:41:2b:68:4c:
                    21:c4:86:55:f9:84:b4:e9:40:b3:31:9b:bc:74:bc:
                    bf:fb:7e:53:c7:52:b4:5a:a4:cf:d3:9a:73:6c:45:
                    b5:88:17:f1:ad:f2:67:95:17:8d:a4:d1:e1:92:fa:
                    f1:a5:cc:b3:47:d8:db:0c:d4:30:1e:ff:c9:42:45:
                    58:33:f7:f1:9c:d4:f2:a6:6f:83:93:81:e4:6a:87:
                    c4:ed:7b:3f:d1:ee:e1:72:b4:56:f7:5f:71:20:bb:
                    3a:40:32:2a:5a:48:bb:89:5c:4d:cd:75:d9:b6:44:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:4C:DC:4C:5F:0E:5C:5E:92:5A:9D:2F:70:2D:16:3A:BE:04:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:db:ff:4e:f4:a4:ed:4c:f7:49:f5:93:1c:4e:07:e6:7a:d0:
         22:1a:3d:2c:d7:03:7d:9b:dc:fa:eb:f5:4d:56:c5:78:f8:d4:
         dc:08:a0:bb:1d:2e:52:8e:37:58:b9:ad:07:a6:99:28:cd:1f:
         d9:e0:39:53:be:7e:fe:6d:cb:d4:2b:d4:7d:fa:ea:7e:72:e9:
         f9:4d:be:ff:b9:9a:ca:15:af:d1:0c:d4:bb:dd:d6:73:f3:f8:
         34:be:fd:4c:6d:49:7c:8b:25:65:99:33:77:71:72:fb:df:c3:
         bf:13:bd:9b:c6:b5:39:a5:22:a8:41:b4:b6:20:91:ee:cc:68:
         10:9e:43:ef:7f:95:ce:c5:c7:02:f1:7d:4f:84:2b:ac:b0:f2:
         19:14:d4:99:16:e7:fe:94:1f:9c:3d:e0:74:71:a2:a0:96:99:
         8e:66:98:86:68:2f:72:16:17:16:36:86:32:a4:96:7d:4b:e0:
         ac:f9:f1:2f:17:ab:47:c0:05:6d:b8:e5:48:86:79:69:c0:d9:
         9f:32:a0:9a:77:11:ab:70:0e:68:a9:4d:4c:ff:c3:0c:12:9e:
         6a:7e:06:a4:50:90:c4:46:1f:13:7b:bd:0e:9e:7d:fc:8f:0a:
         1b:e1:c6:74:43:7a:a5:93:1a:8d:b8:42:ec:c0:76:e1:bc:5a:
         ec:e9:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:19:03 2025 by rpki-client