Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f1638685-f797-3436-8b5e-311170dd82b7.roa
File:                     f1638685-f797-3436-8b5e-311170dd82b7.roa (raw, json)
Hash identifier:          v3WLmJRVxDEyuxrBvkx6ywjIY6I0LyxSCq4zhcrstgM=
Subject key identifier:   3A:FE:12:BE:29:75:4F:B2:80:2A:91:40:0B:C0:A0:8D:E4:B3:EB:29
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285849DA6D716E1BFD25BC25369A80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f1638685-f797-3436-8b5e-311170dd82b7.roa
Signing time:             Wed 14 May 2025 18:40:34 +0000
ROA not before:           Wed 14 May 2025 18:40:34 +0000
ROA not after:            Tue 12 Aug 2025 18:40:34 +0000
asID:                     46844
IP address blocks:        2604:c980:4600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:da:6d:71:6e:1b:fd:25:bc:25:36:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 14 18:40:34 2025 GMT
            Not After : Aug 12 18:40:34 2025 GMT
        Subject: CN=bd2ee833-183b-49bc-8bbb-e8591a7d211c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:26:1a:13:ab:e6:6d:5f:15:e5:3d:fd:2e:
                    76:62:e1:e8:0e:cc:dc:08:96:b1:76:ba:4f:38:da:
                    53:9c:68:fb:73:80:c1:48:a0:4d:8d:5d:0b:af:4c:
                    71:a8:5b:be:8f:da:43:16:3b:66:38:0e:c4:fc:8e:
                    a4:3f:01:30:5d:b8:f2:c1:b1:b2:09:e0:6b:ad:77:
                    b7:77:53:1c:8e:e8:47:4d:c6:3b:1d:43:2b:b9:ff:
                    a8:fc:08:04:f2:23:d9:33:da:57:1d:1d:18:96:15:
                    d7:45:6b:c2:e4:64:61:75:02:af:31:c7:af:a6:84:
                    7f:d9:71:df:e4:ca:cc:e1:dd:a9:58:48:73:62:7f:
                    5f:38:0f:d4:c2:7b:56:75:13:13:c1:0c:72:f2:0d:
                    a0:5a:0f:bd:c6:0f:1d:5b:fd:e7:cb:cd:60:32:3f:
                    28:cd:89:83:a8:c8:46:a1:24:ba:73:d1:4b:63:96:
                    b1:be:a5:99:ee:7d:04:bf:01:d5:61:87:f3:47:92:
                    8f:fa:72:e8:62:6c:10:6f:67:85:12:6b:1d:16:04:
                    49:88:48:69:69:15:07:f2:ae:33:a1:82:ae:e3:be:
                    49:8b:92:36:32:4b:39:dd:fd:d4:48:19:d5:38:34:
                    31:18:79:97:82:a9:02:63:79:22:e2:e3:d5:af:a2:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:12:BE:29:75:4F:B2:80:2A:91:40:0B:C0:A0:8D:E4:B3:EB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f1638685-f797-3436-8b5e-311170dd82b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:4600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:7e:f2:b7:b2:ff:4f:86:d2:5d:e8:ba:69:14:95:b6:a2:
         ec:02:b1:b8:4c:9e:97:97:7c:1a:a1:a7:b6:10:0e:03:8b:99:
         a6:93:05:17:76:25:6f:68:e9:72:ea:50:f8:e3:f0:ce:1c:a1:
         47:8f:7b:99:cc:16:be:9c:04:59:3b:d5:25:5b:3e:a5:42:ca:
         16:de:38:da:31:23:65:2a:e2:a6:53:f5:ca:d7:a3:40:9d:c4:
         39:bd:67:60:2e:87:5d:45:8d:1a:8e:ee:70:69:30:bf:6c:02:
         ed:0c:88:6a:72:8a:1a:a7:d2:76:23:cc:dd:6f:1c:f1:42:ee:
         12:6a:8c:11:51:6a:c9:7a:a2:b1:41:93:a9:5b:91:60:2e:75:
         61:48:69:77:19:93:6a:a8:af:ba:3d:69:92:6b:29:81:59:1b:
         ce:93:9b:cd:16:99:1c:56:6e:1d:8b:29:e8:3e:c2:7a:99:d3:
         22:9e:ff:4e:6f:e9:2f:28:12:1a:4b:36:b3:51:df:30:87:57:
         22:8d:d2:0a:91:b8:52:17:b9:55:a0:ef:a7:8c:aa:3e:bd:88:
         de:06:0c:b3:5c:f0:65:de:70:72:52:2e:cf:a3:8b:58:15:8d:
         19:2b:e2:0e:87:c2:c8:09:76:b6:8e:6b:dc:d9:56:1c:4a:c1:
         00:7f:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:45:42 2025 by rpki-client