Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
File:                     263e656e-d169-3c6a-81fb-9368ebd2555e.roa (raw, json)
Hash identifier:          iShwfesdVpR9Dw/ykf8jNwfRC+o6r5+YKNhJoGSSym0=
Subject key identifier:   BC:17:5B:C9:75:BF:5C:D9:D3:CD:54:63:93:D8:62:9D:66:C1:5C:78
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A268AC0D4FB216F80695EAA00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     64286
IP address blocks:        2606:f180::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c0:d4:fb:21:6f:80:69:5e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=6292f7cb-f917-44de-b038-ac7b16e5e75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:98:e0:e8:17:76:0f:45:52:ab:c6:b8:ad:
                    dd:8f:d1:33:d2:49:9f:ac:6e:f2:dd:ed:5e:0c:e1:
                    f2:6e:a6:c5:a7:2b:48:5c:58:74:2e:d0:ac:8c:ce:
                    40:12:84:43:cd:0e:22:ec:e9:0e:cd:39:d8:f3:97:
                    f7:13:b0:e3:4c:28:63:38:8a:28:91:32:ef:b9:b8:
                    41:bd:8c:b8:f0:c0:88:17:dc:ad:c7:d7:44:97:2f:
                    c0:11:76:34:92:05:0e:21:49:b6:d9:61:6c:8b:2b:
                    b0:85:cf:0c:d9:a6:e1:b4:62:8f:a9:1e:61:81:ad:
                    cf:14:da:e5:6c:8e:5f:ff:8a:7c:96:46:c9:34:5a:
                    52:f9:86:be:be:58:ed:45:f8:2f:cc:59:58:10:16:
                    e0:bc:4c:d2:b1:19:6c:0a:90:16:7d:cb:65:72:3d:
                    39:2d:23:9a:86:fe:28:5d:75:a4:03:f0:20:e6:23:
                    b7:a9:ab:72:53:b1:d4:9b:d2:77:e2:b4:f1:dc:82:
                    6a:ee:2d:19:88:ed:5c:cf:66:79:7d:c4:ff:79:bb:
                    64:e4:4a:68:57:ac:2b:1d:4f:a7:86:97:29:37:6d:
                    88:58:f0:4d:59:39:b7:63:64:bd:22:f4:a9:df:7d:
                    16:93:2e:04:5a:f4:fc:fe:af:3b:e7:11:50:7c:d7:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:5B:C9:75:BF:5C:D9:D3:CD:54:63:93:D8:62:9D:66:C1:5C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:ad:74:7b:43:67:0b:31:97:c0:e7:8f:d5:e1:63:d8:09:
         44:ab:e7:ff:85:dd:de:53:ec:5e:3d:8a:f8:4b:e4:a5:6a:9b:
         3d:3c:18:bb:42:8c:d9:f6:a9:e0:af:36:b3:4c:a7:ea:7e:ff:
         06:34:c8:4f:66:61:57:83:0c:ed:3e:61:2f:ce:fb:10:5a:0f:
         b7:ab:cb:7d:ac:74:a9:7c:87:2f:74:5e:d3:f6:44:ec:02:93:
         c6:78:b0:61:ae:ff:7a:03:78:cd:1a:da:7c:f2:fe:b4:22:61:
         68:6c:ff:d6:c6:3a:f2:f5:57:f8:a9:43:d8:95:16:81:04:33:
         ee:58:8d:fa:1b:02:83:65:5b:6b:24:2d:27:69:11:d6:80:86:
         5e:e0:f5:52:9d:6e:e5:f9:dd:47:bc:92:ae:56:d9:ec:ba:d6:
         cf:ea:dc:09:10:94:37:b1:2f:68:4e:29:44:38:41:fc:f0:e2:
         56:1f:cf:ae:0e:2d:90:9e:62:08:4e:db:d6:a8:53:62:15:8a:
         af:a8:e3:52:eb:ca:fe:e8:d3:ef:67:0e:ec:c5:64:4f:43:96:
         78:cc:9a:6e:50:a0:20:70:eb:fe:ae:02:e2:c2:17:7d:bd:bf:
         6e:b2:bc:81:dc:58:84:4a:df:b8:05:78:54:00:83:88:57:78:
         7f:8f:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:15 2025 by rpki-client