Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa
File:                     068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa (raw, json)
Hash identifier:          ruJTDiencYLD+CiAV/Gik71Zr+3RGK1t1a2D1dCZXRk=
Subject key identifier:   EA:8F:16:D9:2D:B2:F0:99:5E:D6:29:22:C3:CE:B0:E0:FA:0D:CD:34
Certificate issuer:       /CN=f2560405-675d-4c58-8230-db678dbdf9bb
Certificate serial:       010D0C9F4328584A34801AB1F4233D2416668300
Authority key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:f6f9::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1a:b1:f4:23:3d:24:16:66:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2560405-675d-4c58-8230-db678dbdf9bb
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=e6ef5dee-59e2-46d3-968a-e28cea33cccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:a8:c2:ac:c0:11:45:e2:a5:e8:9c:85:22:
                    ad:99:5b:e6:22:18:de:e2:95:b2:83:04:78:e5:2f:
                    1b:b8:3e:30:bd:d8:a8:5c:3c:c9:6d:42:05:29:f6:
                    3b:86:9e:22:b9:46:ca:f0:9a:d2:b1:8e:30:b7:48:
                    e9:59:38:c0:e3:05:4e:e4:9d:e3:28:38:99:d5:26:
                    65:7f:71:47:b8:3b:da:10:2f:45:3d:3d:64:43:29:
                    4c:ca:65:08:bb:93:5e:06:09:4b:85:3b:82:27:1b:
                    ad:21:b2:d1:ce:46:57:55:13:65:53:c6:ec:d5:59:
                    42:8c:94:b2:83:65:3c:c3:c8:d9:34:52:bf:19:fe:
                    0c:f8:f3:db:3d:38:12:47:52:dc:fd:1e:75:e5:54:
                    68:c1:36:80:82:f7:f7:f3:d4:18:e3:d1:59:08:5c:
                    1d:0c:1c:f9:43:b1:7f:cb:45:22:bf:8b:ef:96:6c:
                    6b:3a:5a:66:ba:f1:d9:fa:dd:3e:82:c8:ae:e2:fe:
                    24:2c:d8:fb:79:da:8d:00:2e:4e:f5:7d:34:b8:1a:
                    5b:a3:2a:d2:74:cc:4a:cb:ae:fa:75:8f:07:4c:f1:
                    3b:ce:12:b7:06:cc:ce:19:17:60:a2:68:35:9a:f4:
                    0a:99:8d:61:fc:90:21:a1:ee:0c:a1:9c:c9:79:88:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8F:16:D9:2D:B2:F0:99:5E:D6:29:22:C3:CE:B0:E0:FA:0D:CD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f9::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:49:eb:30:4b:1d:13:f8:61:89:f2:dc:45:c7:56:17:ab:
         32:04:93:4d:55:56:4c:5b:fa:ee:50:7d:4a:d7:61:77:d7:00:
         35:21:cd:70:da:b4:3e:a6:11:de:b3:bc:0b:2c:32:09:77:75:
         43:cb:7b:1a:70:3f:02:35:53:ea:b7:96:54:61:2b:09:99:01:
         db:25:2b:dc:46:c4:f7:ad:4e:3c:eb:01:44:db:c4:72:9a:c0:
         a8:1f:32:63:8a:d8:f1:6a:8f:04:c5:f6:4e:e6:0d:20:37:4c:
         28:85:34:26:2e:2f:ec:a6:d1:41:c7:67:ca:be:f7:20:1a:86:
         d7:93:bd:9f:74:35:23:a4:41:fe:fa:2c:1b:1d:7e:44:cb:a1:
         48:5e:f3:b5:c2:dd:55:31:f3:97:47:ef:b8:f3:9e:c4:47:8c:
         d3:07:8c:59:a3:a0:db:3d:21:65:ff:67:cb:29:4b:d7:44:b3:
         15:a8:85:6d:9a:e5:e2:47:26:eb:22:91:68:6e:af:3a:fd:22:
         37:61:fd:7d:8f:23:77:86:91:39:b1:b2:0b:05:7d:96:65:b5:
         c3:a3:60:3d:e5:8a:f1:6a:1d:01:d3:5a:1b:09:cb:73:a2:4a:
         29:99:14:e7:f9:3f:5f:6a:46:49:84:18:d8:a3:b1:56:f1:c3:
         6d:7b:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:32:38 2025 by rpki-client