Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa
File:                     0ba20da9-894c-3074-8646-2dce7b9bd518.roa (raw, json)
Hash identifier:          2YMLJCcxqAKzbrLryo+Go0QKWjib988HPooZjSCWqJI=
Subject key identifier:   7F:CC:9C:F4:1A:01:58:FC:C4:06:2D:91:8C:04:A2:0A:24:A8:4E:B6
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584A3A157AA3A98D26AD9DAA2080
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2620:147::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7a:a3:a9:8d:26:ad:9d:aa:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=d6137649-90eb-4f23-acf0-4504990afeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:91:b8:ea:9d:37:09:49:1e:d6:fd:c9:df:
                    f1:57:2f:35:d3:23:8a:db:37:82:50:ca:da:8b:ef:
                    40:96:f0:6f:89:73:38:29:d4:fb:9e:b7:ef:6b:7e:
                    26:ec:c8:63:ec:b5:53:2a:cc:df:cc:f7:5b:80:9c:
                    d9:85:1c:83:16:27:1c:3c:c3:9a:68:97:e0:d1:00:
                    d2:64:03:03:ff:18:f2:06:43:03:89:7f:84:77:5f:
                    c1:4e:ab:3d:f5:af:32:39:a5:fc:0e:50:29:b6:29:
                    5d:3a:73:88:c9:99:4c:f3:2e:1d:b4:f4:e5:30:1f:
                    cd:10:1a:7c:42:c9:15:44:6f:d0:ba:f9:48:95:8a:
                    d4:21:86:17:c2:d0:b9:93:cd:14:87:81:81:73:f8:
                    68:1b:e7:b9:0d:48:b5:73:5c:6d:a0:ba:e8:e7:a3:
                    c5:58:08:25:ba:a3:28:a4:17:90:d5:f0:2e:0c:a4:
                    a4:f2:ad:c8:29:23:be:f4:94:bf:f7:d6:ac:74:34:
                    a1:c0:12:cc:ab:a2:6e:75:fb:96:60:5e:ae:2a:7e:
                    2a:ec:42:aa:51:f0:f0:e3:f7:65:de:91:af:30:36:
                    ea:90:bc:f1:63:c1:78:d7:e4:7c:87:11:b0:f0:c1:
                    c2:ec:ec:bf:88:87:f2:62:b1:ae:30:31:81:5f:c5:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:9C:F4:1A:01:58:FC:C4:06:2D:91:8C:04:A2:0A:24:A8:4E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:e3:4d:f8:f0:72:a1:46:14:e4:d7:a5:50:bf:c6:6d:fd:
         7d:f4:23:b3:11:3e:92:ac:14:f8:09:3a:c2:80:6d:24:56:0a:
         3d:15:c7:59:c3:f1:3e:56:aa:f8:8c:74:be:5f:4a:2c:3c:64:
         68:8b:91:06:af:f9:22:fb:a9:63:9b:d3:12:05:a9:7b:21:f9:
         ac:20:4c:59:96:ed:18:4b:b5:ed:be:0a:92:fb:6c:df:68:1b:
         45:3e:d0:eb:62:5f:2b:e0:bb:48:91:6a:f2:a0:48:7a:2a:91:
         08:01:d8:be:ef:2f:4e:21:f1:da:31:0a:22:08:3d:31:2b:d7:
         78:bb:d2:53:46:b6:77:f6:2c:bd:e6:2d:3a:55:58:03:08:c1:
         d0:97:cc:8d:68:a2:02:53:4e:b8:2f:36:a9:25:ed:b7:bf:7d:
         6f:34:44:b9:31:3c:a4:75:b2:3c:e5:9a:b9:77:6e:a3:b6:7e:
         89:af:02:45:04:b0:5b:93:02:c8:71:a5:93:ac:c2:51:d7:2a:
         5f:dc:0a:9d:ec:26:29:f8:28:0b:58:a9:c1:c7:9f:6d:10:99:
         07:09:fb:27:07:24:34:25:0c:3c:10:09:8c:fd:04:25:29:2a:
         39:2c:85:21:fc:8b:4f:27:3d:12:4c:1c:fa:6b:b7:56:f8:8b:
         4d:22:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:35:22 2025 by rpki-client