Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa
File:                     961600cd-6ae6-3596-924d-2a01837588b7.roa (raw, json)
Hash identifier:          IPDDyRPy0llZnPDUdGgvd5a2ELjaiRWPfWBnqTVoFd8=
Subject key identifier:   42:F4:82:5E:D6:97:E8:6B:44:7F:30:5B:7E:7F:77:89:6D:53:59:00
Certificate issuer:       /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial:       010D0C9F4328584A0C054CE79B0CB658FA948C30
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393562
IP address blocks:        2604:640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4c:e7:9b:0c:b6:58:fa:94:8c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=54914f72-1beb-4095-8439-2252edb227bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:ae:9e:d9:c5:1d:63:5d:9a:90:64:17:47:
                    20:0e:3c:ff:a9:e4:13:af:89:fb:ed:9d:db:0d:34:
                    82:61:98:5a:93:c7:93:8a:b9:ef:1f:9b:11:44:eb:
                    2e:68:f0:df:1b:04:f9:1f:5b:42:34:d3:dd:c1:d0:
                    11:c8:d1:16:b8:99:bc:71:41:56:f9:58:88:50:a1:
                    57:e2:72:e2:40:64:17:0a:26:b4:33:f1:60:44:d5:
                    91:a8:d7:6a:c3:76:67:82:e2:59:0b:f6:eb:7e:97:
                    55:b6:ec:07:28:e3:42:1a:36:ab:16:d4:7e:14:fe:
                    41:55:23:f1:83:c6:9e:9f:78:5e:4f:a7:9f:69:3f:
                    57:c2:99:7a:3b:56:94:bc:72:a2:3a:85:e4:63:4e:
                    d9:9e:15:81:49:0a:2c:cb:00:b3:37:f8:26:28:ae:
                    12:6c:70:5b:fa:44:22:64:79:85:d1:14:0a:24:d5:
                    21:64:14:3e:2a:20:1b:86:aa:c8:3f:8d:98:a5:25:
                    58:63:83:c5:60:b7:f1:1c:10:41:df:f7:8d:73:51:
                    45:4c:2a:e1:0a:c4:4d:c2:c3:86:f4:c1:00:8f:cc:
                    2e:37:93:0b:73:55:3d:4e:f2:a6:e6:61:fc:62:e9:
                    42:21:d0:cb:08:36:43:56:3b:e0:75:0f:f7:ed:a2:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:82:5E:D6:97:E8:6B:44:7F:30:5B:7E:7F:77:89:6D:53:59:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl

            X509v3 Authority Key Identifier:
                keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:36:03:9c:0b:cc:92:e9:64:dc:d8:4d:df:c0:65:ee:bc:a1:
         8c:ab:e8:db:5b:92:a1:e8:79:9b:37:56:f1:37:d2:22:db:39:
         7f:91:e1:5f:6f:17:46:9b:6c:4d:9f:5d:0d:26:7b:9e:c9:3b:
         7a:4e:a8:f0:1f:ec:b9:39:2b:90:16:4a:a6:9b:2f:4f:d1:a5:
         3c:2d:0f:70:66:41:b9:18:f9:52:09:d1:7f:a6:f3:b6:39:a6:
         a1:0a:e5:18:b2:27:37:51:00:da:fc:1d:7d:db:1f:d4:36:f0:
         fa:b9:d4:f1:9b:1f:76:5a:87:62:0d:37:ac:ac:d5:b6:87:8b:
         bb:91:bd:e0:9f:56:bf:6a:9c:e9:02:7e:a5:43:3f:8e:12:77:
         6c:c7:58:79:b6:76:8c:9e:f0:70:fc:9c:1f:93:f2:5b:ec:fa:
         f4:80:5f:81:bb:3f:8f:06:60:45:20:37:04:13:ea:3f:b5:18:
         35:ea:e7:6d:b6:8e:b0:e1:dc:ab:f3:f1:07:4c:d4:33:6d:41:
         77:a3:6e:5e:97:fd:b6:6b:ad:78:18:82:fe:6c:5d:9d:ff:07:
         9a:c9:bc:13:85:94:49:82:b3:64:5f:15:a6:ee:fe:eb:69:32:
         f0:2d:3c:d7:ed:46:2f:ef:92:a3:57:42:e1:ec:86:8b:7e:e4:
         20:49:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:32:05 2025 by rpki-client