Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/c914d67c-f3a2-36c0-908d-b3819837a4d8.roa
File:                     c914d67c-f3a2-36c0-908d-b3819837a4d8.roa (raw, json)
Hash identifier:          nWL0Ofl+idUpHBVrCYq5Kymx9YG3tETuU39N6Iqu9GA=
Subject key identifier:   24:B7:A0:B5:F0:65:A8:50:99:57:07:54:5B:FC:15:0E:7C:47:A6:62
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584A050A76601DEE70F81E49B780
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/c914d67c-f3a2-36c0-908d-b3819837a4d8.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        2606:69c1:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:76:60:1d:ee:70:f8:1e:49:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=1a400370-e775-4588-be55-5a16ed979099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:29:81:a1:75:cd:38:e4:9a:56:59:f8:d3:
                    9a:8b:8a:10:49:03:49:3e:7a:63:3d:95:7e:60:87:
                    d7:58:46:38:91:e5:5a:02:da:a4:18:24:39:c4:50:
                    20:24:9f:a1:c2:11:36:01:d0:5a:b6:11:53:c9:d5:
                    23:e9:90:d9:50:4d:0a:d2:8a:ac:d5:dc:87:36:a2:
                    29:f0:6d:2a:9d:06:d7:a0:96:2d:6f:7e:38:90:48:
                    bb:df:28:19:c6:0d:30:d5:74:6a:9d:10:e6:d5:db:
                    5a:9c:eb:ef:db:30:c8:f7:fb:55:a3:1e:9e:ed:c0:
                    71:47:90:39:a0:55:a0:2e:fb:d4:33:7a:80:7c:29:
                    5b:d1:a3:d1:b1:f9:2e:8d:93:d9:00:85:b5:2d:54:
                    32:ce:cc:14:14:d6:72:45:38:b3:0a:1c:17:5c:81:
                    a3:6a:5a:12:58:84:96:bb:2e:ec:70:97:a8:44:b4:
                    2f:b6:7a:c2:03:ae:f8:83:cd:91:e4:fb:31:a8:e9:
                    8f:ef:43:5b:9a:0a:2f:56:9f:d8:23:fe:78:3d:f7:
                    83:19:14:bc:b1:a2:4d:29:e1:9d:4b:4c:53:15:ec:
                    d1:a3:1d:bc:df:e7:57:43:4c:df:6e:f2:73:8f:6b:
                    c6:9c:02:b4:ea:1f:c6:fd:2d:91:5d:55:30:39:e7:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:A0:B5:F0:65:A8:50:99:57:07:54:5B:FC:15:0E:7C:47:A6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/c914d67c-f3a2-36c0-908d-b3819837a4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c1:1101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:42:74:c6:24:75:f8:7d:24:4b:48:1d:b8:97:ac:29:c2:11:
         d9:7f:42:76:a3:8d:e4:04:bb:c3:c5:03:d8:f5:40:5b:d0:d6:
         6f:7e:e8:b5:e1:32:0c:e5:19:32:f2:26:64:90:70:fd:97:1a:
         21:ba:57:13:ff:c4:bf:23:36:36:25:fb:2a:d6:90:cb:9a:c0:
         d8:7b:07:a5:72:6e:b9:ba:07:21:80:f8:ae:1d:ac:fd:4e:a0:
         bb:1c:45:03:1d:cf:c9:ee:ab:ff:06:5f:04:b1:ec:e1:46:4e:
         7f:56:0b:2d:41:8b:b3:97:5a:0b:5e:57:c3:c8:43:9a:dd:ca:
         bb:9d:8e:cb:d7:e6:1a:28:b2:1e:5a:69:cf:e4:e9:1e:3e:b6:
         f4:5d:9e:df:84:93:d8:ff:32:59:ed:1b:39:d1:ef:e7:f9:42:
         1a:7a:01:45:b6:42:3c:21:18:9a:bd:f7:f9:03:ea:21:2f:78:
         26:3f:98:2a:30:3c:bc:cd:9a:b9:bf:85:db:20:7e:25:67:b1:
         02:32:7d:69:64:90:94:e1:3c:11:e8:8d:57:4b:47:42:88:e6:
         f7:5e:28:bb:53:c2:18:91:58:0c:18:f1:4b:02:6f:93:7f:92:
         77:46:d8:01:8d:1d:25:54:c5:22:ca:52:d1:23:f7:2a:2f:85:
         43:91:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:12 2025 by rpki-client