Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
File:                     1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json)
Hash identifier:          RFZVaOkZth3of1uin1plupy97ZqesvQiN1dhFgJtAm0=
Subject key identifier:   CF:88:00:3B:28:5F:D5:C5:6E:2D:A6:F8:2C:FE:35:4B:CA:6B:C2:83
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584A1FE9C29EDBA9C0B021AECF80
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     897
IP address blocks:        2620:ab:a000::/48 maxlen: 48
                          2620:ab:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:e9:c2:9e:db:a9:c0:b0:21:ae:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=a8eadd18-767f-42f5-ae7c-d396213b7902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:60:5e:04:c4:e2:e3:77:81:04:4e:75:2a:
                    2a:71:5a:7e:86:26:7d:a8:27:4f:c4:16:9c:ac:cc:
                    e8:40:78:a1:da:64:8d:ce:15:9a:aa:b8:4a:f5:8b:
                    4d:57:8f:a1:30:6b:44:0b:0f:50:e3:1d:ba:11:ce:
                    12:1e:5d:d8:a1:e2:48:a8:1b:22:3f:c1:3b:ee:03:
                    df:14:bb:f0:47:ea:b7:40:09:36:aa:61:c2:37:92:
                    2e:47:70:83:69:23:6e:46:8b:78:6f:95:89:67:e6:
                    13:a0:58:05:72:11:d3:68:bd:fc:53:0b:ce:55:66:
                    4a:6e:2f:be:eb:ce:d6:87:77:5b:ec:08:d8:0e:fa:
                    a6:0a:e7:c0:1f:68:35:aa:42:6f:c6:6b:e0:21:02:
                    71:4c:2d:ba:a0:a0:43:5d:ba:47:c5:3f:84:71:13:
                    d2:24:58:c2:e1:e1:dc:3c:79:01:58:ee:d1:a0:12:
                    f2:ff:f5:34:9a:f3:7d:e6:2e:c2:bd:63:d9:db:5f:
                    03:cf:2d:4d:81:95:a0:e7:99:ff:81:ca:66:5e:9e:
                    27:a0:b9:d4:1a:b5:e2:a9:ce:e6:f8:86:8f:6e:e8:
                    24:2c:aa:61:e4:30:32:5f:8a:45:a4:29:d2:73:de:
                    f1:22:6a:d0:cd:da:8c:39:99:6a:38:e3:27:8d:1a:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:00:3B:28:5F:D5:C5:6E:2D:A6:F8:2C:FE:35:4B:CA:6B:C2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:12:79:17:f2:29:5d:d5:17:b1:6b:b8:1b:86:93:a2:51:fd:
         98:b1:0d:44:de:3f:c5:24:d3:4c:27:87:81:37:4c:94:b9:2e:
         15:f8:ab:b2:4f:0c:d7:cd:70:7d:7a:02:22:ed:c4:7d:d4:81:
         7b:80:de:58:ac:45:73:12:e7:a9:c5:18:60:1d:4a:2a:79:24:
         89:49:2b:bf:8f:70:05:29:f2:a7:35:95:88:0f:71:ff:51:ce:
         91:96:d5:b9:dd:1f:04:6e:85:62:b8:05:0c:2c:3d:a1:b5:f3:
         94:58:20:18:90:50:ad:de:00:26:9c:ae:d0:f7:54:28:e5:d7:
         3f:59:58:45:10:9e:dc:ca:d0:a6:0d:d9:9a:5c:e7:54:79:2c:
         f9:38:f3:32:44:30:54:45:d2:c3:bf:e1:f6:8c:ac:2b:4c:09:
         bb:20:4a:f5:34:d2:89:1b:37:ce:1c:61:42:f0:74:91:f6:2a:
         84:2e:1e:e2:1f:1c:8e:e5:30:43:67:45:87:47:a5:d5:19:91:
         1f:ca:63:08:87:28:de:3b:94:ee:c4:5d:37:9f:10:53:09:9e:
         10:36:7f:45:f9:f6:df:8e:93:92:35:32:02:77:27:35:35:e7:
         46:5d:10:94:d5:e4:e3:e8:62:ef:47:17:22:ea:1a:bf:27:cc:
         30:58:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:45:01 2025 by rpki-client