Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
File:                     bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json)
Hash identifier:          SOD87n6zFTGx2Co8P2oxeCYjO08kR9Y2aYNl6+z0LM8=
Subject key identifier:   77:5F:21:78:7A:3C:6A:86:16:A5:8F:14:8D:68:9B:01:8E:F3:72:F4
Certificate issuer:       /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial:       010D0C9F4328584A331AE1A73DDD23568B25A280
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54650
IP address blocks:        2604:bb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e1:a7:3d:dd:23:56:8b:25:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=f48d54a1-2ea9-4b41-856d-cda355081afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:2d:c1:96:5a:be:1c:37:69:36:b4:0c:d4:
                    de:05:f6:b0:a7:08:47:f0:ae:9b:aa:7f:1f:5a:94:
                    2a:45:b2:47:8c:3b:c2:c0:b7:e0:c2:a8:53:23:10:
                    fd:68:7f:99:1c:66:87:b8:e3:0d:80:8d:1f:14:50:
                    de:f6:6d:b5:59:8e:42:03:8c:24:93:0b:91:04:8c:
                    78:1f:25:41:03:c9:3e:cb:e2:67:1b:e0:b5:86:40:
                    49:b1:19:28:65:eb:be:af:a1:e7:94:c3:cb:2d:22:
                    7b:56:8d:9c:e2:16:81:a1:58:80:cd:b1:90:7c:58:
                    7b:4b:84:a7:88:05:7f:72:ee:d7:e7:bd:80:6a:af:
                    48:57:38:4e:1d:c0:de:ce:57:bd:8f:b4:55:a4:06:
                    21:46:28:84:00:82:54:40:51:08:0d:e1:0e:6f:32:
                    af:25:56:35:0e:32:f2:24:f1:a8:ee:6e:9f:dd:a3:
                    28:70:fd:98:ea:8a:93:f3:a9:27:49:2d:a5:ed:47:
                    39:1a:80:31:cf:56:8f:6b:3f:dd:61:b9:47:c1:77:
                    10:7e:52:31:48:1b:ab:07:71:8f:89:f9:5e:07:44:
                    6e:fb:c5:1a:57:28:31:20:d1:83:5e:bf:a3:e8:41:
                    9b:2e:7e:cb:88:ac:49:e1:b6:4b:a1:9c:d8:0a:b5:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:21:78:7A:3C:6A:86:16:A5:8F:14:8D:68:9B:01:8E:F3:72:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9f:58:41:ca:5c:0f:d7:31:05:a3:4f:b1:21:49:4c:40:ca:
         9a:47:8b:a8:57:d8:2d:ae:c8:85:62:7f:bd:69:92:77:96:79:
         d7:1e:7e:b8:23:3b:b2:c1:a5:de:a5:8e:a7:54:f6:1d:49:3c:
         af:8e:ab:3e:fd:9d:55:c2:52:36:69:7e:39:1b:be:db:51:7e:
         0b:81:f7:8e:8f:85:f1:ae:8f:a8:b4:b8:90:4b:92:67:c0:7d:
         1c:e8:47:dc:d5:fc:83:6e:f1:70:de:8e:1d:94:9c:01:e5:92:
         6b:f9:41:8a:33:c3:5f:68:c1:4c:5b:7a:94:08:84:9e:b0:3b:
         3f:da:fc:48:31:05:90:65:13:7a:a8:3d:2b:f4:81:e3:f6:8f:
         12:1a:bd:ab:7b:89:18:29:c5:88:d0:1f:e1:aa:a5:06:ee:52:
         99:d6:23:db:69:54:47:93:86:ca:fe:10:fc:66:9f:3c:ba:b3:
         b1:69:7c:a1:98:db:0e:41:2c:12:1b:c5:3b:22:b7:e4:48:7b:
         82:44:80:1a:b2:f2:07:6b:51:84:d0:c7:b9:89:f0:13:ff:c5:
         9a:ba:90:98:ba:36:ab:5e:50:db:94:0d:f9:1d:4f:0a:20:73:
         fa:c9:d9:d5:08:bd:4a:e4:f1:2a:b5:40:22:84:76:16:0a:da:
         3b:93:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:42:42 2025 by rpki-client