Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
File:                     bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json)
Hash identifier:          VoBu4wgBkycOyNNlcyUTAbZgM1v70ChDZWyvWEPQvbo=
Subject key identifier:   1E:CB:9D:1B:E7:5A:20:68:40:48:B3:C2:14:21:9C:FC:63:15:83:DB
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584A3A15753C3D8AC08DE72F0A00
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     50842
IP address blocks:        2602:fb68:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:75:3c:3d:8a:c0:8d:e7:2f:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=1ad52fd4-4452-4238-88cd-5d672dc88cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:71:5c:c3:7c:3b:b5:f2:3f:ea:af:de:d2:
                    64:e5:a5:b5:e7:a3:35:cd:2a:fe:bc:c7:ef:e0:ad:
                    f4:35:d7:52:60:95:9d:2a:9b:8b:8f:96:08:2a:ef:
                    87:1f:74:2f:ff:e6:c5:5f:d7:0d:75:08:8e:dd:73:
                    f6:33:7a:66:f5:ac:c9:aa:20:fa:3c:c4:0d:71:f9:
                    19:cb:14:b6:1d:46:c8:9a:81:2c:78:57:ed:6c:82:
                    95:ab:35:58:1b:f3:83:1f:4c:af:d3:ed:2b:ab:fd:
                    94:e7:03:97:96:59:c7:07:3a:43:be:2c:03:84:b3:
                    29:07:18:e7:24:2c:15:a9:6f:aa:14:dd:09:70:cb:
                    b1:e2:10:62:1f:d7:c9:42:48:57:59:d5:4e:a1:2d:
                    44:b8:22:37:19:2b:fb:c2:c5:cb:a1:8b:d7:5a:c0:
                    13:92:36:63:6b:1a:05:ef:53:6d:04:65:36:88:62:
                    1b:e9:7d:2a:c0:9b:8d:a6:30:c6:ae:40:da:68:10:
                    c7:ad:db:e5:0f:35:0a:55:b9:2a:f3:5a:70:f0:31:
                    c2:b0:53:f6:d8:90:90:db:d7:8e:93:74:3a:e5:d8:
                    41:3d:b3:3f:19:fa:66:f4:96:da:2e:34:6b:88:00:
                    3b:22:c9:23:3f:84:a0:a0:01:c8:d7:11:47:8c:e7:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:9D:1B:E7:5A:20:68:40:48:B3:C2:14:21:9C:FC:63:15:83:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:15:c2:8d:fa:de:b9:8f:56:50:03:4e:a8:db:33:8d:3d:d9:
         04:51:2a:b5:9d:ed:00:2d:f6:5b:21:90:7a:8d:2c:19:d8:73:
         b8:07:fb:56:84:cc:31:2d:a9:bc:f0:6f:0a:5b:60:26:19:fa:
         40:5e:47:2f:e5:cf:90:83:04:98:e2:40:e1:d1:d2:6b:d6:75:
         75:24:af:04:6b:6e:52:1c:44:27:9d:7a:33:4c:4f:07:27:a4:
         c4:81:37:87:e9:b0:b3:5b:8a:b0:26:87:cc:e4:91:36:ca:f0:
         8b:93:5d:e7:5e:35:2b:35:81:58:53:e5:c6:2c:1c:db:3b:8b:
         06:be:87:12:ac:9c:b6:c5:34:41:52:b6:64:35:3e:2e:a5:e0:
         c7:8d:e3:9d:e5:33:7e:3e:ba:b7:88:32:ae:46:8f:b3:b4:ab:
         c3:4e:ed:b2:37:e5:e3:62:42:3f:1c:93:cc:fe:a9:40:68:83:
         ed:b5:97:21:e2:7e:e8:3e:85:01:2b:bc:17:26:09:49:d8:f1:
         2b:72:b4:65:a9:4c:bb:f3:af:22:57:a4:c9:52:44:03:3a:6e:
         b6:b3:11:a0:a1:28:f1:59:c0:6f:82:de:7f:6f:58:67:92:9d:
         8e:07:95:ef:b6:58:27:79:34:3c:0e:d5:de:9b:f5:2d:c2:4a:
         94:6a:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:58:35 2025 by rpki-client