Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa
File:                     722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa (raw, json)
Hash identifier:          2n8S8nXOYdTqvqwxTk50LX7RS+Kii7AM4s957+QmW8Y=
Subject key identifier:   6D:3D:14:84:77:95:EF:73:6E:76:7C:E5:FE:CB:64:3A:39:D1:28:0A
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584A268AB10D403D89F7B906B680
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     32133
IP address blocks:        2606:8e80:7000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b1:0d:40:3d:89:f7:b9:06:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=953e9557-2666-41d5-81a8-35341beef421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:2c:92:6d:29:7c:0c:8b:a5:b3:8b:d1:04:
                    6b:be:d0:47:84:47:3f:43:91:bc:1a:25:b4:7b:30:
                    33:53:8b:f6:22:22:24:be:54:5b:9b:f7:e1:f5:a1:
                    1a:4c:e5:31:88:ae:54:ea:b4:41:67:5c:72:db:59:
                    cc:c3:72:fc:d8:43:c5:76:39:a1:ed:8d:45:48:0a:
                    66:f3:e3:5f:5f:be:27:27:4b:b8:76:cb:56:60:40:
                    e2:81:3d:26:3a:25:74:14:f0:3e:32:7e:6d:21:02:
                    1b:c8:8b:1f:66:69:ff:d9:9b:eb:55:91:dd:c9:a5:
                    66:d7:19:34:3b:54:63:5c:3e:40:3d:65:d0:d5:c9:
                    b7:91:45:39:b2:2f:dd:dc:62:2e:a8:e4:13:24:5d:
                    31:4e:ab:9f:00:ef:69:95:24:75:9e:db:4b:f2:d4:
                    16:3d:41:83:77:1e:73:fd:6d:12:4a:ce:08:bb:71:
                    b0:66:22:d8:ac:fa:9b:88:d5:3a:01:24:05:47:5c:
                    b6:ab:dc:15:0e:5f:93:e4:59:29:1e:d9:6c:69:76:
                    5d:58:a6:3f:bf:a6:4c:68:be:11:3f:e9:c0:ce:c1:
                    3d:bc:7c:ed:49:56:8d:7e:10:e4:b1:78:60:b5:3d:
                    41:e1:b8:88:b2:f9:85:6c:11:8e:88:78:32:18:36:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:14:84:77:95:EF:73:6E:76:7C:E5:FE:CB:64:3A:39:D1:28:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:7000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:71:f6:18:7a:d7:b7:08:b6:45:5d:ce:b3:17:7c:92:87:a3:
         65:37:cf:3c:b6:16:82:18:c3:50:d5:02:5b:a8:3c:fa:24:2d:
         46:2d:23:33:9f:ee:47:1f:61:48:15:a1:96:bb:3d:a5:10:91:
         4b:a1:9b:cb:c8:ee:84:06:e6:01:97:f2:69:e3:27:f4:5f:44:
         ca:5e:0c:5a:2b:f7:2d:d5:f3:ce:ea:3a:a1:82:b4:52:c2:48:
         06:ef:44:40:9f:20:bf:d9:18:ad:da:ab:e8:f6:7d:94:09:9b:
         39:41:4a:05:a0:14:90:3f:10:15:e8:be:6f:09:51:a1:b9:c2:
         fc:bc:23:66:d4:53:23:46:9c:76:81:18:48:81:75:7c:ec:bc:
         74:1f:14:3d:4d:4b:13:5f:9d:f3:1e:fb:10:a5:9d:a4:ef:7c:
         2c:50:e0:6f:0a:41:0a:72:61:27:b2:c3:31:e0:eb:9c:16:4b:
         33:98:31:b6:78:10:96:82:18:c1:ca:28:9a:70:a6:2c:a1:d7:
         5d:3b:b5:61:bd:cc:b3:8a:02:0c:44:12:8d:01:1e:c5:9c:41:
         11:38:04:18:86:f7:ab:b5:70:ed:bc:02:6e:ae:65:67:9a:c5:
         53:bb:ab:d3:16:55:b5:5a:30:eb:e7:77:8b:23:ac:56:ab:a0:
         06:eb:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:39:39 2025 by rpki-client