Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa
File:                     af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa (raw, json)
Hash identifier:          MbUuXFwpACRORUm5kLsf1gFissFxinsDrA5vGsxh/Rw=
Subject key identifier:   26:E0:FE:F1:5C:8B:D6:B0:D8:E2:A5:1A:A0:98:6F:2F:D1:6A:41:D3
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A0D6A817E4D6F7CA5EA45E000
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     62651
IP address blocks:        2604:c980:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:81:7e:4d:6f:7c:a5:ea:45:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=9ecb61b7-3530-4aa2-8088-993b7fbef520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:73:9e:3a:21:53:87:1c:a5:77:6f:54:18:
                    67:7c:79:e6:d5:64:8d:da:0c:74:a5:7f:27:a1:f5:
                    45:f9:de:45:f6:2b:a2:b6:39:46:af:b5:70:1d:2e:
                    57:b2:e9:02:f2:3d:fb:1e:b7:78:a5:83:07:15:97:
                    23:78:ce:eb:a0:9c:86:1a:3b:c9:65:f7:45:f7:1a:
                    b0:00:14:18:69:f9:9d:df:ed:53:ed:08:ad:3f:19:
                    93:87:f1:2a:07:7b:73:f4:29:b3:ab:bb:81:db:da:
                    4a:80:0e:cf:7f:07:44:a8:ef:70:77:f2:06:c4:49:
                    99:91:fa:7e:d6:a9:4a:62:14:6c:a3:02:37:a9:15:
                    b9:0e:86:56:fe:44:4a:9d:7a:ba:d7:e9:a5:62:e6:
                    f0:db:d2:f2:80:04:91:11:35:2c:e3:ce:4d:dc:b2:
                    4f:47:32:d5:2e:13:95:73:6b:c5:8c:92:d8:83:8c:
                    97:b6:5e:c8:b2:a6:8d:43:31:6a:0d:94:8f:12:2d:
                    a9:9a:e3:0d:ec:ac:af:24:e7:ac:47:40:77:f5:74:
                    a2:32:9e:4e:4c:bc:f5:b6:89:b3:44:fa:a1:17:68:
                    a2:21:bb:41:80:2a:d6:62:e1:2f:44:6c:dd:74:df:
                    f0:35:56:59:87:70:6a:e0:32:65:c4:c7:eb:42:fa:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E0:FE:F1:5C:8B:D6:B0:D8:E2:A5:1A:A0:98:6F:2F:D1:6A:41:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/af14aee4-2d51-3b25-8e5c-3ea0f33bc5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:a9:6f:ac:ae:f7:e3:04:ee:04:c9:b3:6f:c0:4d:29:6b:
         22:9d:bf:fc:5c:da:89:34:be:a0:7d:c7:8c:ae:84:ce:3a:3f:
         e4:39:38:62:f7:4c:2e:55:c2:2e:d5:f2:f8:1f:8b:f5:69:68:
         f0:0c:ee:c7:d4:79:21:c2:78:75:18:e0:a8:46:c0:f5:3a:22:
         76:63:27:cb:3d:ca:b7:53:32:78:b5:ca:2f:e6:25:95:df:46:
         26:86:8a:c5:bb:a2:a4:7b:61:d2:46:e3:2a:4c:31:b2:5f:49:
         da:0d:15:71:3a:f0:a4:6d:8b:51:a0:e6:70:84:04:60:1b:f9:
         c2:4b:b1:30:18:86:7e:3f:60:e2:be:a4:ca:81:1a:6a:88:23:
         47:bc:0f:94:8c:f4:a4:cb:72:d9:5b:96:ba:3f:3b:19:c8:06:
         be:45:ae:5c:1b:26:c9:bc:d5:97:2e:a8:7d:af:d7:50:80:4f:
         e6:56:31:7e:b3:93:01:ff:e2:4a:05:df:c0:ff:28:96:93:8b:
         87:4f:e7:8c:19:41:99:a2:e1:63:a0:7c:ee:92:34:a2:ac:71:
         66:04:42:b1:dd:44:95:21:ca:c5:f2:97:a6:ef:cb:69:70:f1:
         d9:59:48:82:ac:0d:b2:43:4f:49:e8:81:80:32:75:14:a7:dc:
         a6:84:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:50 2025 by rpki-client