Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
File:                     0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json)
Hash identifier:          1/RdjoPJOlaBg2tpKgnAb2fYldTyQObDpRweWHhdNXc=
Subject key identifier:   4B:AC:79:CC:E4:44:F3:1C:8F:DB:D9:60:AF:3D:B6:92:7B:BD:45:51
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584A268ABC524B6F7BF243F9CD80
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     31998
IP address blocks:        2605:ed40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bc:52:4b:6f:7b:f2:43:f9:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=e04aedb1-ee37-43c4-966e-e0f7256e102a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:9d:21:c2:70:1d:43:dd:11:03:9d:8e:17:
                    9e:84:1c:30:10:41:f4:06:0d:68:96:98:86:2a:05:
                    59:a7:de:54:3c:49:f6:c2:62:ae:5f:23:92:e7:92:
                    7c:cf:32:ee:df:53:1e:d6:2a:f0:55:10:2b:31:73:
                    04:c2:ae:58:df:51:16:af:1e:df:a4:b2:cb:2d:52:
                    66:bb:45:cd:23:db:5f:5e:dd:7e:00:5f:ed:a1:74:
                    fe:df:99:f7:a0:e4:df:90:72:21:ef:ef:89:00:88:
                    94:e7:91:57:91:7c:66:9a:2a:9e:87:5d:3d:0b:4f:
                    6d:bd:ec:73:1b:da:9d:c6:41:54:9c:5b:c3:0a:18:
                    a2:93:dc:2f:ed:01:fe:91:24:32:68:99:b7:15:43:
                    bf:73:0b:a2:03:5c:a4:eb:0c:b1:08:ea:2d:98:dd:
                    6e:68:87:09:87:44:0d:9e:c1:48:bb:3c:8e:f9:f0:
                    51:a1:41:4e:05:c2:62:3b:f2:d9:7c:98:5c:ba:c2:
                    5d:40:1c:8b:8e:bb:76:50:c6:ae:dc:ee:79:b4:26:
                    26:71:cf:28:c7:20:6b:fd:a7:f7:39:96:99:0e:66:
                    c7:d1:fa:43:e3:5f:8f:5d:9e:78:cf:bd:c9:15:ad:
                    2c:7c:fa:da:a0:a4:57:37:6c:25:12:08:38:24:eb:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:79:CC:E4:44:F3:1C:8F:DB:D9:60:AF:3D:B6:92:7B:BD:45:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:ea:f8:57:67:da:03:fe:b0:42:29:3a:53:d1:6c:38:fc:
         2a:fe:4c:41:34:2c:12:18:ed:be:dc:c7:1d:d4:22:11:c2:e4:
         5b:6c:14:4d:63:3a:c6:0c:ff:31:6b:3b:2d:9b:30:19:7f:c8:
         85:bd:e8:4a:10:70:cb:5d:a2:41:ff:54:33:42:34:dd:20:b1:
         58:0a:a3:8d:aa:8d:8b:b9:55:92:f0:9d:c4:8d:3c:f2:0b:b4:
         4c:7a:74:5f:76:27:51:97:d4:15:37:24:4d:68:80:9e:2f:88:
         b1:7d:60:76:86:b4:1e:8b:d4:49:f7:5b:05:95:09:69:2a:82:
         89:f5:98:a6:4a:95:fc:59:e4:fc:71:cb:d7:bb:e5:fa:9a:ee:
         61:4c:fd:08:29:a4:4b:a3:ae:d0:46:71:34:c0:49:21:e7:83:
         ac:f7:fc:a9:78:f7:39:e2:b1:63:1e:58:da:2a:bb:64:a4:23:
         cc:81:bd:9d:90:62:fc:eb:6e:c1:c1:e8:d2:01:c8:94:8e:30:
         38:c3:ef:9a:b2:c8:db:98:d2:a9:94:a3:8c:b4:a6:e9:22:ec:
         60:7e:8c:26:b2:50:4d:db:de:28:1a:4d:9f:d9:08:7f:7f:1c:
         30:c1:4d:53:27:99:17:8c:4e:db:b4:b3:a3:c8:c0:d4:27:a5:
         54:bc:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:51 2025 by rpki-client