Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/01b28752-7882-3622-92f8-9e5333cb0aa9.roa
File:                     01b28752-7882-3622-92f8-9e5333cb0aa9.roa (raw, json)
Hash identifier:          l2jXYs58df+YyjZ6qnxdvtp4iS7XwLGLOo/grLcqOEk=
Subject key identifier:   4F:40:E1:12:11:4B:9C:8E:75:F0:C6:E0:67:3C:86:28:7D:2E:77:E8
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584A90A0C64B1B6278D252585280
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/01b28752-7882-3622-92f8-9e5333cb0aa9.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2605:b040:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c6:4b:1b:62:78:d2:52:58:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=706ed706-fcd3-4d57-a230-2278abfe5961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:8f:17:04:1e:85:7d:80:7c:44:6d:5c:91:
                    6d:0e:ce:4c:86:f0:b6:c2:88:af:b8:c2:df:79:b6:
                    15:b4:6c:d8:95:47:cb:4c:c4:a7:82:3f:f5:f7:ee:
                    6e:43:10:43:4c:72:7d:71:e9:a9:e8:6a:98:9a:23:
                    0d:f7:1c:72:95:82:40:05:b3:af:6f:73:f7:05:ce:
                    a7:3e:ae:67:58:7e:55:b6:91:9e:33:4c:41:64:eb:
                    f1:5e:7e:00:3d:68:82:bc:ea:f1:86:c4:3d:c5:b9:
                    13:61:68:13:25:cd:6f:99:2a:b9:45:5f:0f:2f:48:
                    a7:a4:8c:1d:3d:37:fc:60:a1:bf:ff:ec:7e:1b:d6:
                    51:c6:92:65:74:43:73:18:fd:d4:af:c9:56:e1:6c:
                    95:e2:e0:9f:4d:c1:07:75:b1:5d:5d:33:7c:9f:e0:
                    a9:0a:9c:3f:f4:1e:df:15:92:d9:7d:60:a7:5e:b4:
                    1b:61:99:dc:e4:68:ba:70:be:ad:f8:0c:83:c7:d2:
                    a7:cd:ec:e4:2e:70:b9:b3:53:da:25:72:ad:81:99:
                    31:a4:35:e2:59:66:ac:d5:93:27:77:fd:41:c0:3e:
                    d3:6e:53:ff:15:b2:79:cd:b7:ab:07:72:c4:aa:bc:
                    40:20:67:b6:68:a3:e3:0d:ad:b9:03:ea:18:f7:27:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:40:E1:12:11:4B:9C:8E:75:F0:C6:E0:67:3C:86:28:7D:2E:77:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/01b28752-7882-3622-92f8-9e5333cb0aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:a8:e2:c8:49:cb:cb:77:eb:3f:7e:76:c2:7f:af:bd:af:
         ed:bf:df:22:bf:ba:fd:68:0f:41:3e:13:3f:80:b3:d6:fb:13:
         4c:8f:f2:04:ff:f9:b5:9c:c5:65:81:7f:b2:da:5a:3b:0b:8b:
         66:b6:f5:45:99:6c:1d:1a:65:3a:19:c1:21:27:42:30:96:b0:
         31:7f:ed:8d:d0:55:54:ad:ac:41:92:e0:c4:54:af:e8:83:fd:
         82:56:c3:07:c9:ed:ab:48:b8:d6:c2:a5:76:b0:fd:87:4d:55:
         68:08:14:0b:ff:58:47:0d:f2:04:a2:fb:c6:e6:bb:44:e6:d7:
         70:b1:57:68:d0:db:6d:5f:09:06:ff:56:c7:fc:f3:af:1b:a1:
         3a:30:1f:c9:d4:a4:a2:8b:29:f6:3e:e6:66:d0:7b:63:22:59:
         d2:32:17:31:78:cc:99:11:35:2d:ec:6a:aa:9b:ad:15:8c:d2:
         6a:78:22:9b:b2:f7:7a:0c:d2:74:c0:fb:36:2b:9d:57:cf:41:
         c7:9e:ef:69:22:9b:5b:b4:f4:a2:fc:a4:4c:9c:9d:e2:c9:b5:
         48:21:02:12:1e:c9:3e:dd:95:fe:f6:5d:55:c4:cf:5f:f8:8b:
         6d:29:30:92:16:7a:3c:1f:02:e1:0a:be:5b:a0:47:6b:e8:98:
         9a:d4:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:18 2025 by rpki-client