Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
File:                     ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json)
Hash identifier:          k18wrkypjv8BJMFzEoLs21oNSr5SVCIHG4gXJd4XtZE=
Subject key identifier:   38:72:76:66:1C:32:83:BC:FD:5D:A4:6F:B1:2C:06:50:B7:70:83:FB
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584A0C0577D2612384161354A280
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397041
IP address blocks:        2604:f740:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:77:d2:61:23:84:16:13:54:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=62e90910-bad3-4ebb-946e-cbcab53d6c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:ff:72:77:4c:df:7a:ba:34:57:70:fd:98:
                    07:dc:c6:c2:16:c0:84:ff:bb:fa:d9:68:8b:e3:ab:
                    34:5d:f9:49:a2:97:f8:3e:2a:87:d3:e3:af:cc:ce:
                    e9:46:7c:e3:57:18:4d:25:cb:c9:12:6d:2e:36:f4:
                    d4:c7:de:b5:9b:79:e4:74:18:04:5e:af:ee:80:eb:
                    ae:92:dc:b3:d3:6a:6e:f2:d3:2a:a5:f3:f1:2f:ec:
                    0f:84:48:02:60:36:27:74:97:de:2e:7a:9b:c0:9c:
                    73:10:b5:b6:ca:dc:3f:0a:ef:20:d5:db:e9:c4:b2:
                    9e:6b:dc:6e:21:12:17:d9:03:42:c3:a2:ad:fd:32:
                    a2:ad:2d:65:9d:45:0d:f4:28:28:20:03:1a:11:1f:
                    ad:c2:1a:cb:e5:2b:ae:41:f2:5a:0a:b7:a7:e4:f7:
                    b8:99:44:ca:6b:5c:53:89:38:9f:97:d9:b6:c3:21:
                    e9:bb:aa:53:b3:c3:39:83:85:a5:11:94:6d:b8:12:
                    53:36:f9:ca:ce:5e:1a:eb:c1:61:44:1d:d1:94:36:
                    92:5a:0a:5d:87:95:0a:37:88:27:05:8b:9a:84:c4:
                    21:5f:6d:91:88:c9:93:f3:88:07:d8:8b:d1:2e:0e:
                    71:5c:2a:b5:3f:56:1f:b3:36:8e:8c:31:74:06:c1:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:76:66:1C:32:83:BC:FD:5D:A4:6F:B1:2C:06:50:B7:70:83:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:04:21:36:c5:54:65:6d:5c:33:4b:f3:c3:11:16:64:55:b9:
         d0:17:a2:43:07:93:c3:e9:b1:43:a3:f0:c2:a2:4f:f2:a5:bb:
         85:b9:70:57:06:43:76:85:fb:96:5e:41:bf:67:00:fb:52:16:
         06:96:6f:77:9e:9d:2b:54:8c:d0:a3:7c:07:15:9f:49:d4:09:
         b0:15:d8:e0:6c:c1:db:af:31:8f:92:e8:ba:8b:39:36:73:c2:
         a8:e3:63:db:48:98:6c:d1:eb:db:1c:1a:02:1e:01:e8:de:37:
         0e:09:11:da:42:be:bc:9f:b2:c7:3c:f4:22:52:b5:0c:fb:a8:
         aa:f1:d1:4f:7f:50:2a:25:40:9e:7b:75:64:d5:df:a1:11:40:
         37:e9:36:fd:c4:09:77:6e:a3:66:98:58:d7:23:f2:6a:a5:1a:
         d7:33:a4:de:32:60:34:fe:cb:94:90:a5:d0:b2:6a:f5:e3:a1:
         04:72:de:48:f2:d1:38:75:bf:98:0e:2a:36:6f:fb:de:82:72:
         a9:ef:e5:3f:44:f5:f3:84:e4:1a:29:89:9f:50:2f:09:2c:19:
         cf:e1:24:16:69:89:d5:94:bb:5d:4e:2c:18:93:86:3d:41:52:
         67:ce:71:82:f5:09:29:68:da:27:7e:24:61:d6:06:8a:98:a0:
         98:b5:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:17 2025 by rpki-client