Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
File:                     1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa (raw, json)
Hash identifier:          CtpffcCsOwBSVxqeGxuPel7pVm2xF9lHfe8ifXj0tmY=
Subject key identifier:   A4:B7:4E:75:72:79:15:52:0C:29:9F:33:C7:C8:12:F5:F4:A1:A3:6B
Certificate issuer:       /CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
Certificate serial:       010D0C9F4328584A63F5B85E1EE91752669A7C00
Authority key identifier: EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     399224
IP address blocks:        2606:95c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b8:5e:1e:e9:17:52:66:9a:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=cc0ecea6-0a41-48e9-8800-b6810e9d18e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:8c:6f:25:60:df:2b:d9:b4:77:07:bd:cd:
                    04:dd:99:c3:04:2d:cd:7c:5a:35:d1:b1:32:fb:ec:
                    70:7b:3a:9c:8c:6f:31:f9:c0:7d:7a:74:eb:d7:76:
                    eb:7e:02:d0:56:3f:ba:fd:42:b0:bd:71:d9:a0:9f:
                    50:9f:9e:80:97:85:f1:16:0c:96:2e:53:c8:b7:55:
                    cd:2e:d0:8f:f5:96:fa:29:d0:e2:18:e7:7a:49:6f:
                    5e:28:5b:d1:bf:08:27:b7:45:cf:fb:99:43:20:e3:
                    58:07:4f:91:05:8d:01:6f:07:53:de:98:76:21:a7:
                    8f:02:7c:48:90:af:43:60:c1:4a:d3:1c:1c:b6:5e:
                    d8:1a:47:ff:14:72:31:a6:c2:d1:27:aa:9d:bb:0e:
                    1c:66:cb:a1:a9:a6:8b:e7:06:4d:39:87:72:c8:ae:
                    3f:89:ea:3b:67:82:66:3b:0f:fe:50:dc:4b:a6:10:
                    ee:1d:c0:a9:fd:35:b1:d4:ea:b4:48:77:5e:3b:74:
                    16:81:e8:49:45:4f:e2:53:b1:51:10:3b:4b:bf:45:
                    93:34:69:86:b5:92:b4:93:ca:96:70:af:0c:0f:62:
                    2c:26:92:43:5e:75:a0:2f:83:37:ca:1a:ec:64:5c:
                    53:e5:6b:a8:8a:27:cd:37:d8:91:57:5c:96:a4:d0:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:4E:75:72:79:15:52:0C:29:9F:33:C7:C8:12:F5:F4:A1:A3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl

            X509v3 Authority Key Identifier:
                keyid:EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:95c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:08:8b:75:9c:fd:28:d2:3d:82:9c:c3:2e:cb:00:2e:de:31:
         3c:1b:bb:be:d4:da:91:a2:9b:7b:ee:5f:5d:20:ea:ba:c4:39:
         a8:25:4b:4c:2e:15:3b:4e:23:8e:65:bf:4e:10:ca:85:4b:c1:
         07:51:a3:b0:e1:ec:e7:65:f1:1e:58:5c:4f:74:56:86:55:09:
         c6:c0:a8:0a:2b:e6:7f:c3:9e:15:dc:97:7c:13:eb:7b:e0:e3:
         60:7a:f5:29:29:8f:2a:97:79:09:3c:d4:2d:39:11:b5:9f:00:
         40:df:33:34:95:a2:73:01:af:a6:45:50:70:8b:d7:17:50:a3:
         fe:45:b0:0e:e9:d9:a6:37:39:05:76:e2:0e:9c:3f:33:70:5e:
         20:84:ce:3e:e3:14:cd:60:fc:08:27:8f:8d:32:a5:a1:88:0e:
         c1:ba:d3:02:26:63:e6:eb:a6:1e:c6:57:d8:09:35:50:16:c9:
         2c:b2:86:94:2e:b4:4e:e2:b3:95:8c:25:e3:d5:01:47:aa:33:
         2b:3f:2c:cb:22:66:30:00:67:b1:ce:23:67:4a:4f:31:c3:1b:
         6b:7c:54:5d:bc:6a:92:5b:03:50:0f:81:c4:ac:2f:30:75:aa:
         00:e3:e9:dd:0f:0a:7d:a1:16:95:92:1a:60:39:20:79:c8:14:
         95:84:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:05 2025 by rpki-client