Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa
File:                     3ee94904-40f3-3616-86ad-0521935c737f.roa (raw, json)
Hash identifier:          wu7vSK7pSrHVOHgKe1+vX6cIJH4SKye/LAfrUJAO1Ko=
Subject key identifier:   32:F7:5A:30:DD:BB:D6:9A:D8:6C:A4:C3:15:88:5B:E3:21:8F:67:37
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584A225ABD521BB5150FFF7ED740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        2605:4300:2c14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:bd:52:1b:b5:15:0f:ff:7e:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=1df1c732-547f-417a-a668-c41e1e1c9eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:f9:39:96:ec:a3:0d:f9:62:12:ce:bb:0d:
                    27:fb:a4:aa:02:7a:64:23:11:c7:81:61:f2:eb:28:
                    1e:3d:34:42:d8:f7:44:86:5c:d4:ec:99:d3:36:a6:
                    a3:ef:c8:9e:05:84:34:21:f1:e1:44:d4:90:d8:8c:
                    ef:d8:b2:6a:da:7f:9a:b1:79:df:b1:9d:6b:20:41:
                    58:35:59:5b:0d:38:18:8d:df:c9:1f:bc:ed:a1:69:
                    5a:b6:6a:9b:d9:af:1b:18:76:c8:b8:e3:4b:08:2f:
                    09:24:83:28:03:ad:10:dd:4c:c9:53:02:e0:9b:a5:
                    f2:4b:41:51:1e:69:02:ea:20:14:f8:89:0b:65:c9:
                    fe:85:a9:12:85:8c:d4:85:8a:05:59:b8:ff:2b:19:
                    fb:a6:a2:28:86:b5:b3:7e:f9:37:f4:af:73:5a:fb:
                    34:57:dc:9f:c9:da:0a:98:0b:47:be:22:1e:63:cd:
                    20:fc:10:cc:bd:bb:cf:2c:74:4d:32:e0:14:15:1c:
                    98:a9:77:d3:6b:f9:4e:df:ea:37:0c:a9:fb:d4:f3:
                    dc:7f:d3:c3:41:e9:87:a0:e7:3e:0f:02:25:09:2e:
                    86:0b:91:29:a7:ed:ba:8c:d5:6c:0e:b6:4c:11:1b:
                    3d:2e:3f:81:80:b0:67:54:84:16:98:fd:7f:10:c5:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:5A:30:DD:BB:D6:9A:D8:6C:A4:C3:15:88:5B:E3:21:8F:67:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:9e:ac:89:9f:7f:39:4c:6e:24:73:0b:46:d2:84:c7:d3:
         80:65:f3:15:23:d4:4f:98:3b:e7:6d:7d:d6:c2:1a:44:d2:76:
         d7:b7:6b:d0:02:b2:75:07:80:26:e2:9d:6f:52:5a:54:cb:fa:
         7b:6b:49:4b:29:ae:d1:4a:2b:74:83:1b:73:45:cd:c7:63:0c:
         8c:34:b2:a4:bb:22:5d:70:2e:f1:48:39:a7:b8:b8:7c:d1:cc:
         7f:23:d5:5c:e8:3c:cd:b0:53:e2:c9:28:6f:69:c5:94:80:a7:
         36:83:2d:a7:98:ad:12:03:43:26:e7:25:1b:b7:e8:13:9c:ac:
         d3:ef:c1:56:4e:16:d9:06:8b:a0:89:ab:92:25:87:1e:c6:7e:
         48:f4:4b:76:b7:4d:78:7b:4b:5f:9f:a4:d0:1a:1a:06:17:42:
         0c:18:3c:bf:d3:7c:23:e7:95:ba:05:88:21:05:2f:fc:a1:af:
         3c:05:17:ff:0e:d3:19:c4:86:6e:00:c3:60:5b:ac:5a:60:2b:
         75:29:4b:3d:d6:ae:e9:58:32:ea:e6:47:0b:43:42:2e:d1:77:
         42:ae:ac:69:39:51:17:75:f4:5b:c2:1c:a6:49:7b:9f:5c:c1:
         9c:7b:14:47:1a:95:a1:a4:d6:ad:ae:e4:32:b2:5d:16:37:7c:
         95:78:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:47 2025 by rpki-client