Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
File:                     424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json)
Hash identifier:          Uz5k8wxGLx+Ty7Yt/BrgLmEUeKnox9R4S76cNfwAR2w=
Subject key identifier:   7B:EC:F8:9A:64:F6:4A:66:82:72:9C:35:D7:75:57:23:E2:77:03:4D
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F43285849D594ED8C60AB1DD928473600
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     397181
IP address blocks:        2604:c840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:8c:60:ab:1d:d9:28:47:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=a4a995da-18e6-4735-99ca-97f74084325f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:9e:ee:f0:6f:8a:0d:b6:d3:9a:5c:6b:17:
                    6f:71:9a:7f:e8:c7:db:4c:85:16:11:41:6e:e8:f4:
                    78:7a:5e:5f:57:65:64:bb:69:e4:9c:b0:81:c8:39:
                    a3:37:05:ed:48:d2:15:4c:9e:19:29:72:36:ab:93:
                    bd:1a:83:5d:66:78:ab:a5:44:7a:dc:8e:1c:2c:85:
                    e5:44:f2:12:70:be:f8:d1:f1:93:75:6c:8d:6b:b2:
                    6d:2c:8d:dd:63:c9:ab:2e:0f:c7:13:e4:80:48:bb:
                    f9:a7:69:75:2e:e1:be:cc:99:17:9d:75:1d:d0:39:
                    0a:0d:10:36:c6:1a:aa:b4:f5:1b:84:04:c7:48:3f:
                    43:6f:5e:9e:7d:13:73:e0:24:ea:b4:2e:b8:1a:52:
                    fd:a7:eb:f7:d9:ae:d2:83:c2:5e:5b:eb:69:87:d9:
                    42:17:fd:b4:02:67:42:2e:a3:cb:2e:1d:4d:37:88:
                    6e:98:f0:61:61:65:22:65:d5:06:89:cf:db:25:29:
                    55:22:b7:51:02:5a:a4:81:fb:ae:66:b7:20:2f:72:
                    7d:a5:c6:f1:59:4b:59:81:09:84:fd:15:b3:f3:f2:
                    b3:98:de:93:44:a2:92:ff:fe:ff:23:0f:4f:64:75:
                    cb:d5:e2:0b:8f:83:53:2b:cd:5e:49:67:28:30:2d:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:F8:9A:64:F6:4A:66:82:72:9C:35:D7:75:57:23:E2:77:03:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:b8:b3:2d:89:2e:ea:25:81:e6:8c:ed:7b:11:bd:f2:d2:
         fb:3a:d8:d6:e4:f2:22:a3:d8:55:f5:8f:98:88:c3:de:29:84:
         fe:1e:db:f4:67:58:18:da:0a:5a:47:97:b2:f3:23:50:62:a8:
         06:48:b1:d1:86:99:96:3f:d2:d1:e1:8b:51:11:84:e0:6e:33:
         d5:f4:3c:ab:67:ba:86:be:85:35:40:ff:24:98:dc:44:b8:79:
         1f:24:e6:89:eb:09:03:ab:08:7f:3b:33:35:60:43:5d:5b:41:
         54:0a:6b:d6:86:50:af:86:8e:f3:6e:f1:7a:1b:c2:b2:85:0e:
         81:9c:93:c3:7c:c5:fd:35:ba:45:07:be:b5:86:67:12:c5:8b:
         66:20:a3:d7:ee:b8:a4:14:00:e1:d5:e3:20:0c:51:7c:e6:7a:
         2c:f4:ad:e8:e8:94:1b:df:22:9e:45:10:63:f8:e6:50:e9:f2:
         10:58:05:83:2e:c1:c7:67:4f:45:d8:ee:e3:dc:17:ab:6a:fd:
         02:de:28:93:58:a8:fa:38:da:9f:5c:1f:bb:01:cf:cc:3c:75:
         04:f0:cd:d7:a5:61:13:ec:9c:19:8b:87:27:8d:11:fb:c6:38:
         1f:84:d5:d0:c7:b2:98:1e:42:3a:87:17:af:1e:07:dd:7a:e6:
         07:49:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:56 2025 by rpki-client