Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
File:                     de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa (raw, json)
Hash identifier:          fGpLb3ZGkbyyScwLrnaATRvNLD9RFB0Jey/sbed0EYs=
Subject key identifier:   60:56:97:D7:63:2E:AE:23:68:8D:41:FF:72:2E:97:68:51:AA:D3:20
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584A2ABAE6222F5A40DD7DF99080
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     400618
IP address blocks:        2607:8140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e6:22:2f:5a:40:dd:7d:f9:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=857dddb8-606a-4e06-800a-1780186d8aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:db:67:73:0f:56:5b:e5:e5:1a:3a:c8:95:
                    20:59:34:9e:59:ef:2f:85:8d:ca:d1:6d:a3:96:52:
                    3a:00:9a:e2:56:6b:ba:35:0e:42:80:3d:37:f5:2f:
                    9f:7f:f4:66:97:5c:fc:60:6b:eb:68:20:be:97:61:
                    71:fd:3e:03:af:6b:ab:c6:09:22:83:1c:f5:5e:7e:
                    dc:54:1d:f9:e4:09:35:6b:f3:2b:1c:31:5d:41:86:
                    96:74:7d:74:c0:1a:62:a4:2f:07:67:7a:ff:9e:38:
                    de:3c:82:da:af:1b:85:8e:82:e9:6b:69:b7:15:2a:
                    6c:71:5a:8f:07:6c:5b:e7:eb:39:41:f2:c7:9c:aa:
                    03:99:20:3d:f3:51:18:30:ce:af:31:50:58:ab:b1:
                    99:63:23:89:fa:18:85:f8:9f:69:e2:b7:e8:a0:00:
                    2b:01:21:d6:0d:d2:fa:77:bb:00:d5:96:d1:5a:cd:
                    5c:7c:96:41:80:e4:fa:59:ec:06:94:f9:85:05:03:
                    86:aa:09:c8:74:34:df:55:f1:3b:88:cd:57:b4:57:
                    2d:b3:20:2f:45:6e:e9:e2:26:6f:61:b3:5e:64:f3:
                    33:56:41:a5:b0:92:2f:ea:e9:8c:d3:49:a6:c7:76:
                    ce:d4:27:ec:86:6b:4d:7c:26:8c:2e:d7:57:1a:8c:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:56:97:D7:63:2E:AE:23:68:8D:41:FF:72:2E:97:68:51:AA:D3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:61:de:08:15:c1:b6:91:ee:96:11:ea:2b:17:25:78:58:
         bb:95:5f:69:b1:dc:54:54:6f:f4:5a:03:6d:e3:fe:8f:17:50:
         53:e0:a0:23:a9:8a:2c:74:71:4c:66:ca:f1:06:3e:38:b8:e1:
         6f:d9:e0:93:48:27:98:8d:86:c4:7c:aa:d6:9a:cb:2b:63:d2:
         95:4f:2c:2f:72:04:f1:79:43:9e:9d:48:5c:bf:39:fc:4d:85:
         da:fa:b4:a8:9e:d8:0e:b6:8f:e2:f6:11:ef:f6:10:21:4c:e5:
         5b:98:06:d5:5b:08:a4:fd:0c:ea:60:26:a5:41:30:ee:55:bf:
         ac:2c:f2:40:10:b7:16:d2:f3:53:3b:7a:3a:c8:f2:f3:02:60:
         b1:fb:9d:58:83:91:68:29:4f:2b:a3:d1:ca:e1:6c:6b:17:19:
         47:f0:5b:76:08:ae:c1:c5:ca:af:bc:4d:d4:55:e7:c0:b2:13:
         e3:92:21:b8:91:01:28:9f:97:f4:c7:c2:41:b7:9f:82:4b:af:
         65:87:52:96:03:28:a9:aa:ad:f1:3e:6c:26:6c:a4:80:ed:33:
         c8:24:67:ec:34:14:85:07:3e:1b:5f:02:98:c5:73:4d:49:ac:
         dd:8a:93:7b:a3:6d:fc:9f:fd:b6:ed:e2:70:8d:e2:45:4d:af:
         21:47:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:36 2025 by rpki-client