Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa
File:                     8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa (raw, json)
Hash identifier:          dmXyV8Lt+Au0XmSDsYG8ssvtjvCkGxWjJ49/dARrDIc=
Subject key identifier:   3A:50:90:F7:F6:34:26:25:CC:BA:FF:62:17:9E:CD:27:92:E4:6C:A0
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F43285849E4EFC574F81E2918C2BE4900
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        2606:7740:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c5:74:f8:1e:29:18:c2:be:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=2d3eeef9-9e65-4953-9a83-44fc4919f86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:ce:d3:6e:98:a6:be:00:93:0f:97:ca:58:
                    58:d6:c1:44:c1:36:6d:f3:3a:b2:92:69:1c:59:d3:
                    98:ee:21:ac:92:71:13:b8:ff:af:5f:ae:da:b3:33:
                    02:6a:64:bd:94:70:a1:18:f8:f6:09:33:9e:1c:be:
                    c9:76:86:c2:9e:2c:33:a5:2f:06:3d:77:09:ec:13:
                    4e:64:96:31:bd:ae:aa:4c:f4:4b:43:d0:84:54:1f:
                    04:d3:b5:7d:46:ba:e4:54:ef:02:26:1a:52:a6:18:
                    94:54:6e:25:d2:b3:38:97:d1:87:56:c1:fa:74:95:
                    ec:21:ab:9b:12:cc:fa:b3:af:1b:0d:88:cc:19:8b:
                    31:49:5b:58:cb:f0:51:cd:ab:a5:99:24:3e:3a:cd:
                    60:22:e3:69:1f:47:cb:05:e8:1a:78:01:4e:5b:5f:
                    67:41:02:89:77:29:51:ed:66:a8:ed:54:1a:99:1b:
                    89:19:a6:eb:99:2c:34:ae:d1:f0:be:0d:3a:36:1e:
                    61:51:4a:10:c6:8c:43:e6:62:10:0a:66:6e:1f:04:
                    8b:1f:8b:34:8f:57:dc:ea:de:18:c1:24:09:51:d9:
                    e8:ad:93:ab:f6:4b:5e:9e:40:ff:60:4a:40:40:df:
                    d0:6f:61:a5:c7:f7:96:8f:f6:ad:b8:40:aa:88:f0:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:50:90:F7:F6:34:26:25:CC:BA:FF:62:17:9E:CD:27:92:E4:6C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:be:74:70:e4:30:f7:1c:eb:95:bc:8c:e4:9a:bd:57:be:
         44:71:4e:4a:59:07:58:00:3a:69:2e:99:90:67:45:0e:25:4c:
         3e:7f:9e:75:bb:9b:54:f8:dd:bd:51:19:e3:2a:ff:ab:95:a1:
         10:be:02:f4:4b:ab:11:fb:eb:bb:09:d8:36:94:93:83:cc:c0:
         22:e0:8c:ea:51:4a:cc:df:27:71:46:2d:59:ca:f6:51:a8:bd:
         5b:51:a0:4b:88:34:9e:e3:8f:05:bf:07:a1:c0:27:5d:56:5a:
         7e:c8:d3:a6:1f:c2:38:e6:bd:d2:a2:c3:a1:fa:cc:42:44:f1:
         a0:53:5a:28:c7:da:a6:2e:80:5a:83:74:4d:27:63:c9:6a:a3:
         cf:e6:2e:8a:10:3b:7c:35:ff:34:f2:a2:d4:cc:08:19:55:de:
         84:94:aa:7b:59:b5:b2:19:89:49:33:10:64:a2:0b:4d:c4:ec:
         35:31:44:f4:99:06:0c:ff:2f:48:3e:16:9e:a2:65:f7:46:53:
         1b:f3:7b:ae:26:52:72:f8:02:6c:86:d2:37:2e:8b:56:bc:88:
         e4:6d:1e:d1:f6:0a:d7:c0:40:1b:37:ed:9e:43:fd:5e:1e:e9:
         72:9a:19:e6:e4:0e:f5:5a:b9:f0:f5:3d:e0:66:39:20:9e:e2:
         1d:23:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:41:43 2025 by rpki-client