Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
File:                     58ea7f89-b5b6-3671-a6c0-811e6620195c.roa (raw, json)
Hash identifier:          DHBXYb2uSWopprjsj8bFYI+S0D28nX9b427GtCLgy18=
Subject key identifier:   D6:6F:2C:3B:89:55:16:CA:8E:E4:AB:76:F1:19:64:1D:47:74:A1:2A
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F43285849A8E9DFD2540F978808DFC5C0
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     54885
IP address blocks:        2601:3000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:df:d2:54:0f:97:88:08:df:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=caae2764-7913-4b7e-8378-2e241bc37279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:45:ad:6e:7a:17:b5:5e:b5:66:ce:8e:39:
                    6f:b9:3e:b5:fb:b0:2c:6f:ef:96:f5:5c:0b:f8:25:
                    bf:8f:9d:c6:13:6f:9f:c6:4e:81:77:02:56:87:ba:
                    ee:75:4b:22:ee:98:6c:11:dc:fe:26:8d:1d:d1:a3:
                    c7:e8:cc:70:fc:26:0f:7d:00:33:12:bd:ec:a8:57:
                    c1:21:b4:16:d6:e6:92:fb:c0:94:28:fe:23:e1:c8:
                    b0:97:bb:57:32:86:2f:3a:be:3c:39:64:7c:1b:4a:
                    eb:19:c9:35:6f:31:ad:29:02:7f:8a:5e:c9:87:66:
                    57:c5:d9:c3:b4:e9:bd:c4:e8:95:61:82:7a:b0:5b:
                    64:96:cb:11:43:70:5b:48:be:cf:a1:dc:d6:b3:26:
                    ad:48:85:36:65:c9:3b:10:2c:85:fb:22:79:b2:15:
                    c2:cf:b9:c1:30:b6:22:ad:e4:74:f7:74:f2:41:f7:
                    a6:26:3d:83:38:65:31:77:2f:ae:3e:fe:ec:a0:62:
                    70:40:48:de:47:50:00:c9:a4:26:b8:db:26:ab:2b:
                    5c:80:ed:e2:f1:75:d1:a9:69:d3:9b:36:b9:6e:1a:
                    58:19:4c:81:ff:3c:7e:36:c1:1c:0e:24:aa:7e:1b:
                    37:0f:e4:e1:bb:e4:55:55:7e:22:b8:85:37:bd:1e:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:2C:3B:89:55:16:CA:8E:E4:AB:76:F1:19:64:1D:47:74:A1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:fd:6d:f1:4f:88:57:d8:2b:a3:50:d4:d0:f6:9a:51:22:
         d4:2a:6d:cc:c4:73:6a:10:66:94:fb:5c:7f:93:52:25:58:43:
         01:77:de:d4:11:73:f2:91:e4:4c:bb:2a:44:f4:91:1f:5b:5e:
         27:4d:a3:d0:73:7c:10:f6:be:9c:a6:7c:42:49:1b:8b:83:8f:
         00:29:78:40:b0:4a:06:7f:11:99:60:a5:1a:31:21:73:94:44:
         14:8f:4a:cd:01:79:95:98:60:9c:cd:2e:2c:a4:8b:cd:79:c6:
         2a:77:9c:7f:f3:59:f1:e0:db:61:04:d1:6f:6d:9c:d9:85:1f:
         85:c0:d5:3a:3b:97:0e:8c:0d:e4:1b:d9:d7:54:fb:b4:c5:b2:
         cd:5e:82:fb:17:bc:1a:7a:85:b6:05:de:5f:18:25:d6:6c:fd:
         a6:d7:2f:58:0f:31:43:96:4a:12:cc:54:88:36:56:f0:34:4e:
         d5:30:5e:ed:d9:b7:81:4c:28:62:ee:4b:a3:c4:30:0a:87:39:
         4a:5e:33:97:a2:4e:da:2b:1d:06:7e:12:f4:25:9f:a6:58:3c:
         6f:4f:51:30:d7:e8:33:34:c3:aa:3c:2b:52:2c:1e:f9:d2:77:
         5f:d5:4e:b1:ef:dc:2c:4e:99:f7:2b:70:cc:9d:5b:0a:d1:22:
         37:a7:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:43 2025 by rpki-client