Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa
File:                     48a22f09-39fe-35fe-9a18-55a71448b023.roa (raw, json)
Hash identifier:          1noEo3ZPhIULsARz9ao+lYdEFG39cs3jVgeKNPA8VME=
Subject key identifier:   1E:35:61:A7:B8:25:6B:4F:2A:3E:B8:F0:78:0D:B1:22:41:9F:C8:03
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584A119AAB34A6E2586044247C08
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     32133
IP address blocks:        2606:8e80:5000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ab:34:a6:e2:58:60:44:24:7c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=4920a618-72de-4f82-8580-4cb68be252a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:18:73:6d:d6:16:5d:f2:ed:93:5c:c9:ad:
                    0d:5f:ca:ee:2e:b4:38:9c:b5:9a:e4:4a:c0:9a:4f:
                    a7:52:ea:f3:a4:c5:ea:8d:a2:93:f4:dd:26:3a:26:
                    e1:e4:dd:fe:d7:9a:33:81:58:62:c2:c3:24:87:5c:
                    5b:eb:6e:c7:e0:9f:1e:18:93:88:5f:b9:83:47:75:
                    84:5d:7e:12:15:b2:37:4e:8e:17:5f:82:ef:2d:5f:
                    5b:d4:5d:09:85:73:0b:36:de:17:00:3c:4b:f7:d4:
                    1c:7c:06:39:6c:38:b6:a6:20:8f:f0:fc:d1:18:87:
                    cf:b4:34:34:0c:3c:07:a4:78:3b:50:bc:53:22:85:
                    b1:70:46:8c:fc:9e:d7:c1:0f:a0:ba:d4:5f:a0:cb:
                    48:0c:cc:04:f1:67:ad:3c:9c:10:ff:24:45:61:8e:
                    10:26:3d:b1:3a:37:f3:21:52:94:d3:ef:2f:74:5f:
                    94:ca:23:9c:0f:da:0c:00:8a:71:0f:46:e2:5b:53:
                    09:8a:89:e8:07:07:6c:e0:54:1a:64:07:44:36:c8:
                    a9:65:64:07:76:b6:a6:eb:e8:32:53:59:91:a2:dc:
                    2c:e6:f6:c3:ee:cc:e3:aa:e9:00:0d:16:00:23:1b:
                    88:f0:33:b2:fc:b8:73:30:26:bf:d8:d2:cb:d3:8c:
                    17:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:61:A7:B8:25:6B:4F:2A:3E:B8:F0:78:0D:B1:22:41:9F:C8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:5000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:bc:95:68:00:f2:7d:17:22:a2:7c:40:b7:ca:0a:81:f3:
         d2:2e:af:fa:a9:c9:5a:1e:0c:9b:93:4d:85:62:10:a8:18:33:
         47:7c:bb:15:ae:8a:d4:5d:87:e1:f0:b0:0e:db:67:86:28:05:
         37:a7:91:27:96:35:e2:69:e8:65:77:81:5e:e3:24:a8:d0:b9:
         cf:2d:43:fe:73:81:77:53:ce:5e:90:3a:c6:fc:c5:f4:b3:40:
         84:c2:47:1b:5c:2d:64:76:9f:72:bb:76:c0:e7:4a:4e:4e:7c:
         3b:2b:98:7f:75:d0:b3:3c:5a:66:4f:13:46:15:e4:7f:f7:24:
         ab:52:c2:0b:fb:32:22:42:8a:b7:94:e3:05:47:16:d5:de:4d:
         f1:64:46:58:55:54:a0:3c:63:cd:b7:2a:68:1e:e9:78:05:01:
         bd:9a:23:af:9e:db:98:04:b7:c7:ea:c3:95:ea:9a:7d:05:cf:
         4e:81:1e:8e:35:28:e8:63:10:83:a8:92:63:c5:d8:9d:4e:e1:
         89:fb:1b:39:6d:ef:18:ed:3b:e2:f1:e1:1b:1c:a4:57:11:d5:
         b2:ca:5a:7e:e4:c9:69:23:12:73:c7:99:cc:1c:0e:e8:55:cd:
         e3:74:c8:1e:b4:52:a5:cc:4b:a2:77:6e:31:d8:19:fa:f8:35:
         6a:cc:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:02:22 2025 by rpki-client