Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa
File:                     8ce6c55c-8061-391c-8844-45ea5465e84b.roa (raw, json)
Hash identifier:          M7NZ40PI5tbteOD7HqC4bkNgRJyDkIE0ynz0yjLZe68=
Subject key identifier:   76:F4:24:D0:4D:A4:21:F9:A7:04:1D:74:54:66:B1:5E:71:6D:1F:52
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584A3E459FAC05440F82C0EBDA00
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     397131
IP address blocks:        2602:fe6a:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:9f:ac:05:44:0f:82:c0:eb:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=e42d48c6-54ae-4794-8384-2d46690e0c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:fa:58:0a:cd:60:c2:7c:a0:24:a2:5d:74:
                    c9:61:98:f1:d1:5b:46:03:6a:c3:46:3b:2a:82:28:
                    d3:e0:fe:1f:69:5f:49:ac:dd:7e:d9:0b:01:c4:5c:
                    1f:5a:99:98:1f:56:00:45:44:61:46:d0:bc:fc:f6:
                    eb:a3:6d:f2:f7:de:02:09:3c:1a:ba:1f:16:64:c5:
                    47:be:c0:64:ae:80:26:cb:36:db:78:f4:94:d9:07:
                    e8:f1:f1:10:4d:71:9f:25:be:de:ed:b2:db:42:70:
                    97:18:5c:a9:44:26:fd:89:2a:e3:48:76:e0:61:b4:
                    cc:12:9e:1b:08:b7:8f:96:a8:7b:0a:1b:34:5a:6e:
                    8d:e5:ed:9e:f9:90:a9:e4:15:3a:2e:0d:d7:4d:56:
                    9b:9e:23:ef:9d:67:af:5e:c8:9f:39:5f:36:22:58:
                    22:8d:33:5d:45:41:20:ae:68:b4:87:f8:07:53:4b:
                    76:b0:96:9e:37:58:1b:48:38:fc:f6:4a:7d:8e:8c:
                    f5:d4:20:b4:85:53:15:fa:ce:8b:b3:6e:24:94:45:
                    3a:dd:8a:a3:6a:04:3f:fa:d4:84:4f:9c:94:de:86:
                    22:a3:00:e1:b2:31:fe:26:f9:25:3a:48:44:86:f3:
                    81:0e:1f:5a:e5:65:86:19:17:eb:d8:19:de:96:90:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:24:D0:4D:A4:21:F9:A7:04:1D:74:54:66:B1:5E:71:6D:1F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6a:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:de:06:de:cf:84:88:c4:2a:43:82:6a:7f:76:44:3f:9c:a0:
         7b:a2:7b:50:fb:d3:37:b0:8e:3f:11:bf:f7:23:7c:2a:91:c6:
         76:b9:cc:02:81:9c:b1:6d:3b:8c:c2:77:2a:0d:9f:c8:a7:9b:
         b9:a9:d4:34:9f:50:cb:c4:37:8f:c8:ac:9f:cb:0c:f8:4f:d4:
         59:3a:8d:f6:fa:0d:5c:16:59:49:b9:a0:ad:e1:f6:9a:72:2d:
         1b:f4:41:9c:26:cc:a2:bc:96:79:3a:49:71:b1:08:7b:69:bf:
         5c:51:57:52:d4:ef:25:0f:5a:65:e9:38:90:c0:af:b2:81:52:
         0a:d6:48:45:81:b3:41:18:10:b0:c3:85:fd:73:12:38:07:1d:
         70:e7:1d:a2:37:4c:a6:2a:b2:5f:60:31:26:c6:01:f2:af:18:
         14:2d:08:e1:55:f6:cf:4a:e5:80:a2:95:47:36:fd:c9:65:3b:
         6e:37:d8:7e:9f:ff:fe:a1:39:31:9c:d4:29:39:4e:9a:84:bd:
         57:aa:7d:27:db:c5:38:35:ff:7a:c9:7b:89:fc:5c:f9:f3:29:
         74:8f:1d:15:bd:d5:fc:a3:fc:8e:97:af:dd:98:91:21:03:d6:
         34:50:83:44:72:fc:e5:1c:82:66:01:19:85:2c:ea:b9:d8:d7:
         2c:57:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:24:37 2025 by rpki-client