Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa
File:                     5498b330-0d87-3083-b485-a3ffd5581a13.roa (raw, json)
Hash identifier:          g1TTMepEZ4MAUF90cnr/6DKUUt6jfyrSbdsBRIFvTVo=
Subject key identifier:   CC:52:23:33:54:52:7F:7A:C6:3F:38:2F:09:63:5E:76:B7:2E:2B:51
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F4328584A2ABAD86DAC66FD95BF6DB180
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     12243
IP address blocks:        2606:1040:1337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d8:6d:ac:66:fd:95:bf:6d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f9d3be4a-d197-4e11-afe7-3623b4385b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:88:00:bc:88:2d:00:46:82:04:39:a2:63:
                    c8:a1:8f:33:5e:d8:fd:fc:a0:2e:a7:5a:f0:e5:3a:
                    3e:64:71:23:01:52:22:54:d4:12:02:d1:61:9e:9b:
                    d5:cf:c2:c6:08:b7:db:7f:a5:29:66:07:44:8d:3d:
                    8c:67:78:61:14:59:85:67:47:b5:70:72:e3:d2:40:
                    44:d2:e2:ff:60:ca:b6:44:91:be:d2:cf:71:1c:36:
                    cb:55:33:a1:e0:b5:c2:a8:6f:f4:05:0f:35:ab:43:
                    8f:94:53:df:f0:44:11:49:1a:f7:83:e3:4a:2c:91:
                    86:d8:d9:09:3a:a5:2c:a3:67:b8:29:4f:3b:bf:84:
                    dc:c3:f3:a4:0f:b7:fd:02:ef:fd:65:ed:e7:92:d6:
                    8c:b2:4a:c6:2a:f8:3e:10:fe:72:17:7c:b6:0e:2c:
                    02:7f:5e:4f:3c:23:5c:6d:3a:62:eb:88:1c:a3:24:
                    4a:5a:d3:7c:1f:75:16:52:d7:a3:65:66:49:96:35:
                    c1:3f:09:51:13:6c:9c:cf:37:91:29:36:50:79:bd:
                    fd:91:bb:b5:74:60:7b:d0:cd:f7:ac:85:9c:10:51:
                    af:73:69:ba:c3:c2:23:ad:f0:01:30:a4:ce:30:e7:
                    11:c4:e4:cb:ac:25:89:b2:94:fe:d4:e7:08:ff:f7:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:52:23:33:54:52:7F:7A:C6:3F:38:2F:09:63:5E:76:B7:2E:2B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1040:1337::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:e0:79:41:00:16:59:a0:fc:36:83:63:a9:4c:0b:a0:83:
         b5:a0:bc:e2:62:fc:37:b2:5c:b9:49:0f:22:d7:1d:1e:cc:1b:
         59:43:85:af:cc:9d:7f:6a:ab:23:d4:ab:42:80:94:29:97:40:
         aa:4b:62:3b:6a:26:52:7d:88:37:ec:60:e7:5c:e1:dc:ee:0f:
         5c:62:9e:dd:5c:29:bc:fe:46:cb:77:2e:c6:24:63:80:a5:66:
         3d:e1:d6:d7:29:6d:ed:d0:b4:40:0b:81:9d:ba:c1:1f:cd:57:
         b9:4f:a5:57:fa:8d:1c:f2:6e:b6:23:74:6a:99:14:08:fd:ae:
         df:3d:47:9e:e3:3d:75:9f:56:95:57:f9:e0:ac:5e:c0:0c:d8:
         59:3f:20:59:87:de:00:8a:ea:d8:bd:a7:e6:cd:6a:e2:e3:8e:
         e3:c1:34:f7:19:e3:7b:f9:5f:e3:8d:d2:74:ce:aa:de:36:79:
         f5:14:0d:b3:d9:d7:e7:c4:44:0f:1e:1f:7d:60:10:75:a4:5d:
         a3:73:c7:57:2c:cc:a4:68:1b:35:35:03:fe:7f:55:79:fa:db:
         e5:1c:bd:fd:aa:e5:1f:cb:9f:cd:31:17:f4:3d:99:f4:cb:c0:
         88:98:c0:2b:3e:4c:64:00:42:6e:d2:62:6b:1a:47:5b:f8:99:
         2f:25:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:08:44 2025 by rpki-client