Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
File:                     1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa (raw, json)
Hash identifier:          ePXBkwmjRZy20fveXRd3F+2DGpJTUs6G2s/WcXNJAnQ=
Subject key identifier:   D3:DC:4E:4D:11:34:20:1C:2E:B8:36:3B:9F:C1:E5:2C:F5:7F:66:E5
Certificate issuer:       /CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
Certificate serial:       010D0C9F43285849F715283D55AA60572C621E80
Authority key identifier: 88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     53566
IP address blocks:        2606:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:28:3d:55:aa:60:57:2c:62:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=e7aa583d-d7e8-49b7-8a5e-4f70dee7fe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:2f:21:41:e8:d5:06:12:10:77:24:ef:c3:
                    1a:fe:8d:34:0d:e1:02:79:73:75:88:95:8f:52:5a:
                    81:8a:7b:2f:9a:db:64:29:1d:40:a5:e4:9d:f8:79:
                    a8:fa:7b:c3:ca:30:72:c1:63:91:ce:ae:7d:7e:2a:
                    f2:be:c6:d3:d9:77:a5:e5:fb:67:10:86:2b:62:3b:
                    80:cd:b7:d8:59:90:58:30:da:e7:e6:98:95:ef:f9:
                    14:e2:41:92:21:27:aa:bf:25:3e:23:77:1f:d8:78:
                    52:f7:14:be:3c:fc:93:17:fe:47:3c:f2:14:a1:c1:
                    0d:56:50:78:52:c1:82:e1:36:72:de:83:e0:d0:85:
                    42:c9:52:32:b2:8d:57:5b:e8:2d:ab:07:b4:45:25:
                    44:ff:a0:6b:c8:10:bb:80:ba:3a:78:92:42:40:5b:
                    91:ec:19:a1:31:5f:c6:87:be:22:c0:56:0c:b6:a8:
                    80:6d:68:d2:5c:35:d4:ad:6c:d1:1f:7a:ba:ab:e3:
                    49:d4:1a:cd:da:c6:bf:63:75:33:e2:5f:df:a9:a2:
                    5d:ec:07:73:d9:e6:ea:3c:0c:61:56:9f:17:0c:1c:
                    8a:3f:83:a5:53:18:dd:e9:cf:f8:99:f5:10:9d:62:
                    a3:88:81:0f:c6:36:9c:d4:f9:cf:76:78:96:31:ff:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DC:4E:4D:11:34:20:1C:2E:B8:36:3B:9F:C1:E5:2C:F5:7F:66:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:46:47:0f:df:77:1e:56:ac:3a:b0:f4:02:33:fc:e9:f7:
         9c:f3:6d:d0:8e:7c:eb:9c:69:f6:39:67:d9:66:7c:70:55:e2:
         f5:ae:b6:ad:f4:04:ee:21:78:57:c0:60:5d:5a:6d:17:59:3f:
         a3:42:fb:f5:ba:e7:6c:00:11:54:5a:88:e2:ad:2a:8c:05:e1:
         34:ae:17:d9:f5:7b:e3:e5:2d:17:4c:e6:3e:e2:db:49:2c:07:
         4b:88:f6:76:62:24:ea:41:cb:40:36:18:f2:be:32:70:32:b1:
         dc:ee:4c:63:99:c2:07:2e:59:ed:17:da:9a:ea:f0:01:8c:3e:
         8f:5d:39:e6:58:d6:49:f5:26:80:4b:20:c4:db:78:48:c5:28:
         ce:19:53:84:c4:17:1d:e9:4c:f6:9b:b4:fc:b7:51:94:b0:fa:
         12:08:34:32:49:6a:c6:85:f3:b6:70:85:f5:e5:b8:43:72:95:
         a7:1d:bc:91:72:9c:a0:bb:e2:45:25:4c:da:84:27:f4:13:78:
         d4:be:34:42:11:5f:78:40:5a:aa:d9:b2:2a:f6:e8:31:e6:80:
         88:f6:7f:f1:05:35:7f:80:dd:03:81:2d:02:b1:68:99:39:8c:
         84:1c:ac:5e:43:62:07:0b:c4:51:f0:4a:5b:2f:53:1b:92:ba:
         72:95:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:35:21 2025 by rpki-client