Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa
File:                     d486f244-4174-3949-968e-1b131340b5fc.roa (raw, json)
Hash identifier:          zxhf9nY+KGcuwBboQniMPEx8BMAXEJ+0ogn5eTxX/Z4=
Subject key identifier:   B2:20:A1:2A:DC:30:87:E0:5B:10:68:50:32:DB:BC:E8:27:D4:E6:CA
Certificate issuer:       /CN=675593d5-5ec7-4ba7-9134-6761cde6b601
Certificate serial:       010D0C9F43285849ED30A55600D39DE8B2C4EB00
Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa
Signing time:             Wed 21 May 2025 11:58:25 +0000
ROA not before:           Wed 21 May 2025 11:58:25 +0000
ROA not after:            Tue 19 Aug 2025 11:58:25 +0000
asID:                     198949
IP address blocks:        2604:b200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:30:a5:56:00:d3:9d:e8:b2:c4:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601
        Validity
            Not Before: May 21 11:58:25 2025 GMT
            Not After : Aug 19 11:58:25 2025 GMT
        Subject: CN=815d8759-d8ae-4da4-9bf4-fe961662858f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:73:3b:c1:43:a7:d1:e8:34:a4:fa:81:2d:
                    19:f0:14:9e:70:1f:80:58:53:92:88:c5:25:49:34:
                    3a:87:21:10:76:c9:66:ce:2e:fe:2e:91:80:79:e8:
                    b2:ab:73:7a:9c:ae:8b:6d:d6:1f:52:8d:a8:a1:d6:
                    52:6d:54:77:c4:65:21:ff:d1:f5:2d:2f:23:eb:8d:
                    36:67:8c:72:ae:08:68:61:58:4c:9a:f9:0d:3d:19:
                    94:f5:bb:99:fd:ef:5c:93:11:2f:43:59:4b:a0:7b:
                    4a:00:66:7e:f7:5d:f0:c9:8b:d6:32:89:94:70:b2:
                    5f:13:f3:52:ae:99:9b:ac:5b:c0:96:99:69:43:01:
                    7c:89:d6:25:32:79:fd:d6:95:f0:0a:90:96:94:d9:
                    c7:1f:38:f9:93:b2:57:fd:b1:0e:ff:da:93:b0:f4:
                    52:f7:18:47:3f:ef:25:ae:63:43:07:30:7a:d5:dc:
                    1e:4a:cf:67:76:48:44:69:a9:52:06:d6:f0:c7:6d:
                    49:8d:54:c0:c0:84:09:8c:50:40:20:f0:ca:88:0e:
                    47:d1:a5:e4:94:fa:c2:ec:d0:01:49:a3:59:8d:7a:
                    4a:7a:58:bb:69:ca:cf:dc:55:c1:4f:ce:f8:de:0d:
                    70:38:c6:a3:ec:bd:58:06:4d:9e:e7:bf:5e:d2:07:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:20:A1:2A:DC:30:87:E0:5B:10:68:50:32:DB:BC:E8:27:D4:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl

            X509v3 Authority Key Identifier:
                keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:0e:18:f1:bd:55:4c:0d:3f:d5:ad:5e:5c:e8:ef:61:56:
         35:24:e1:83:74:88:4e:06:bf:c6:04:06:c2:f0:29:49:99:81:
         38:d0:0c:b7:c5:84:4f:25:f6:0e:8f:45:2a:6d:e7:61:4c:f6:
         9d:ff:95:27:d5:d8:f7:ea:25:87:8f:2c:6d:39:f8:53:3f:a2:
         43:0a:dc:98:7b:d6:33:77:55:af:41:50:44:b9:8a:35:4b:c2:
         bf:45:56:ff:bc:2b:22:0e:3f:9b:df:36:aa:ca:a4:55:fd:1c:
         f9:b4:49:dd:eb:e6:5a:6b:85:09:3f:41:db:f9:51:b3:b2:dc:
         10:39:92:a6:65:c5:d6:00:0b:7a:bd:2d:55:c6:6e:40:96:fb:
         86:c4:d9:a0:94:87:d7:1e:f4:b7:68:d3:1c:34:09:23:78:e9:
         83:6c:c7:16:ea:61:b9:c9:70:5b:7c:0e:87:c8:51:08:13:6f:
         6c:a4:24:94:57:55:07:4d:84:2f:db:7b:ed:3a:51:cb:5a:e8:
         1f:09:1f:50:81:8a:3d:f5:9e:ca:32:a5:81:47:bd:93:99:88:
         bd:ad:59:ad:1d:0b:2d:b3:81:f4:cc:e9:eb:4e:80:84:2c:86:
         0e:96:bc:32:f5:00:20:3d:e7:4d:3e:72:4b:ae:a5:ed:01:a8:
         f3:83:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:17:32 2025 by rpki-client