Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa
File:                     1c798ee9-961f-3681-a449-f7df0125a0cc.roa (raw, json)
Hash identifier:          LLxKNe88pIAUVvUpRP3Wbz9LRlXCSU71RjRmjQVdIQ0=
Subject key identifier:   60:83:45:AA:86:4C:4F:A6:99:58:D4:EF:1F:77:F7:34:13:BB:A0:E6
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584A119AB20B1C1603A2B9D4DC00
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     10779
IP address blocks:        2620:be:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b2:0b:1c:16:03:a2:b9:d4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=5abe1d66-d39a-4df6-b9df-0a4de4f120e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:dd:6c:4a:e1:32:99:13:50:40:29:84:0b:
                    23:8b:9c:49:df:b9:61:d6:91:63:3b:72:94:86:3f:
                    21:b6:8d:ba:94:e6:4d:65:16:9b:42:ec:bf:be:13:
                    cd:7d:ed:76:8c:ab:7e:e2:f7:6d:f4:b7:a4:46:b7:
                    e4:ee:34:a0:17:49:55:d2:41:ee:d6:fa:52:9c:5f:
                    22:22:1a:2d:aa:e5:3e:f6:e8:2d:cd:2d:06:8b:1c:
                    9d:3c:16:a4:05:c3:01:24:cd:ca:7a:38:9a:e2:ef:
                    35:78:a4:aa:41:8d:87:ae:f8:50:37:39:bc:58:8c:
                    1a:17:85:ee:63:ef:d0:bb:df:13:8d:37:34:22:94:
                    c1:09:d5:3e:d1:07:9b:20:f1:6f:8a:f5:69:20:be:
                    62:e3:c3:ee:17:b5:f7:79:bc:bb:51:86:bb:ef:d8:
                    01:f3:fb:fd:5a:78:07:6d:f9:e8:8e:23:c7:29:b9:
                    b3:17:97:92:35:d8:e6:fa:00:85:2d:4c:aa:49:6d:
                    89:25:17:ce:69:0f:01:d2:94:df:c0:bc:fa:91:b7:
                    be:3e:1e:83:6a:2c:12:4d:26:ac:7f:7d:f4:7a:ec:
                    2e:9f:80:5b:eb:fa:ab:0a:af:08:13:b8:4a:7c:76:
                    bf:b2:5c:85:ba:57:f4:8f:1e:55:cd:e0:1b:c8:8d:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:45:AA:86:4C:4F:A6:99:58:D4:EF:1F:77:F7:34:13:BB:A0:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:fa:fd:d6:c1:d1:31:3e:6f:2e:14:0e:d8:2a:0a:44:87:
         d5:1b:e6:a8:04:80:dd:b0:77:98:f4:85:4a:70:65:22:bb:e5:
         f4:d9:c2:07:57:69:be:b3:62:72:fb:d2:ba:3f:68:12:cb:b9:
         5e:c1:73:b0:98:02:e7:d7:fc:e3:d9:f2:98:43:61:b6:07:50:
         35:7d:6c:a7:1f:1c:a9:57:70:5f:fb:1a:00:08:84:09:af:dc:
         c7:61:75:52:a0:3f:8e:f6:32:05:8e:a3:46:ec:26:15:a5:35:
         dd:79:22:a8:b2:9b:3b:2d:a4:15:3f:ea:1d:ae:85:e4:eb:89:
         68:06:93:ef:f0:13:f4:cc:13:27:89:b2:8f:6d:55:4c:fe:a2:
         a3:ca:88:ce:2f:79:ae:cc:74:46:61:3a:90:4d:bd:fd:77:5c:
         0f:ed:84:fd:85:ca:5e:1b:73:41:92:47:b1:a2:33:37:91:b3:
         1a:05:27:ff:1c:f4:9c:a3:df:af:bb:5e:18:db:18:97:2c:ef:
         78:e1:75:fa:3c:10:dc:98:45:e3:68:a8:4f:06:d7:b8:db:02:
         1e:20:86:5b:1e:b5:2a:1c:fb:4c:76:b8:de:11:76:d1:b4:6d:
         af:1d:fa:bd:61:20:96:d4:3b:95:29:00:0f:24:55:ba:2b:6b:
         76:66:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:22 2025 by rpki-client