Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa
File:                     7062e891-7628-32f0-a092-d03a625fdc50.roa (raw, json)
Hash identifier:          yKLMz3MQ40OptSQiNYkckzoarJADqTmpEa9Tbg/MWB4=
Subject key identifier:   89:34:C6:80:5F:03:0D:CF:13:8D:B4:06:6A:D6:47:66:11:58:80:CF
Certificate issuer:       /CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
Certificate serial:       010D0C9F43285849E7BA8734C3634B49480DE480
Authority key identifier: E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     46392
IP address blocks:        2606:a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:87:34:c3:63:4b:49:48:0d:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=e991bc40-ed32-4723-9f53-b8f46257b185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:71:3f:27:c2:d7:d7:45:66:c6:c8:61:3d:
                    36:a9:c7:fc:d4:94:45:80:7e:49:17:f9:9b:6e:f3:
                    8f:73:51:75:06:e6:d4:89:30:7d:d3:6b:3a:37:a4:
                    d7:50:26:40:ed:21:bb:a5:31:af:b2:c5:70:b2:45:
                    67:ef:a8:44:2b:eb:85:65:4a:9e:64:fe:df:21:91:
                    c5:4f:57:0c:86:b7:6e:c5:91:85:6a:24:79:b8:bf:
                    0d:22:d2:6d:91:3d:90:3a:c9:15:28:8f:b2:12:fd:
                    8a:93:71:77:a1:60:a3:bb:16:67:ef:c4:4a:a8:9b:
                    2f:43:45:c8:59:3f:56:22:6f:75:a1:68:24:9b:4a:
                    1c:57:69:51:e4:59:17:1b:d8:51:b0:58:6a:0d:38:
                    6f:6c:01:ed:d8:63:01:88:f4:c6:11:41:fe:56:01:
                    3b:28:cb:95:1c:c1:fe:6a:e6:4c:38:5a:f2:bb:4c:
                    17:c3:c2:ec:58:b0:9b:66:e2:20:e4:91:05:c0:5b:
                    2f:14:3c:81:c4:a0:e1:89:98:81:ba:56:9a:76:01:
                    e7:7d:f5:cf:2a:5d:24:8a:f9:e6:b2:bb:46:58:b5:
                    7f:36:2f:c8:94:96:05:eb:3a:e4:41:33:48:4d:61:
                    10:13:93:e3:da:2e:67:ad:9a:6b:c5:b7:b2:fa:1a:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:C6:80:5F:03:0D:CF:13:8D:B4:06:6A:D6:47:66:11:58:80:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl

            X509v3 Authority Key Identifier:
                keyid:E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:41:89:1d:44:b1:c2:b2:02:db:6f:19:ae:18:9f:b4:72:
         2a:fc:51:9e:5f:6a:ea:25:23:66:03:42:34:72:95:af:aa:ef:
         86:0f:12:a2:84:d7:a7:d4:ca:9f:3c:f8:e6:14:31:37:34:fa:
         b0:67:08:15:ee:c3:d2:29:6b:1f:99:d9:0a:5e:6e:9d:c6:47:
         4a:9d:38:13:fd:df:0b:00:e4:4e:00:d0:b8:0e:ef:d3:b4:5d:
         11:3f:70:d0:8c:0e:fc:94:a6:77:cc:c0:e7:91:3f:82:b0:9e:
         fb:9c:bc:ad:45:3d:89:e5:eb:75:84:51:7a:8b:b6:0c:fc:02:
         88:83:2d:bb:93:af:b6:f9:76:ff:00:44:7b:86:f0:35:80:eb:
         1d:27:af:f1:23:23:c8:3b:52:3b:99:1f:a1:2a:7d:80:a3:0a:
         b2:86:3a:61:76:ab:8d:ad:2f:13:bc:da:ad:0c:d2:7f:4c:ef:
         3b:45:9e:54:5c:83:a5:fa:cc:26:4e:1c:22:ab:2b:91:0e:0b:
         de:1f:8d:3a:60:a2:65:e4:e7:71:27:a3:9d:98:01:11:19:bb:
         03:d5:a0:46:df:85:f2:05:bf:ef:9a:b3:33:bd:6a:d3:f6:0c:
         fb:c5:df:4c:1b:be:13:b8:68:21:40:73:ff:67:0f:41:d5:91:
         ec:d5:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:08 2025 by rpki-client