Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa
File:                     2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa (raw, json)
Hash identifier:          Y3sMfLytBpvyhWhWFLGGD68MELFVB2FWfnXHNnPP4Es=
Subject key identifier:   3C:1D:E7:63:5A:33:19:A0:F3:9D:12:87:8C:E5:06:17:99:76:66:89
Certificate issuer:       /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial:       010D0C9F4328584A0D6A9612F7544BD1FA54F600
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2620:1f9::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:96:12:f7:54:4b:d1:fa:54:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=3582ae1a-4ea9-4374-b460-9f40676cbdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:17:46:76:2d:47:f8:33:bf:22:1a:e7:86:
                    e3:05:cf:cd:09:e3:9a:d0:b2:4c:59:d2:a0:a3:72:
                    2f:0e:76:1e:ab:a6:71:09:00:c6:f1:d8:cf:2e:ca:
                    df:13:69:a6:e7:11:1d:c1:3d:04:d4:19:c5:3a:a3:
                    60:f4:61:c9:d8:3a:a9:d2:ea:68:11:90:74:6f:ab:
                    94:a9:bc:e3:ee:32:fa:9f:c4:e4:b6:89:38:5f:0c:
                    7e:a4:c5:bc:7a:07:49:2d:b6:63:26:f2:ad:68:5d:
                    40:e7:d1:37:b3:2c:cf:d2:8d:7d:74:90:1b:24:88:
                    83:ad:24:0c:de:b7:cf:5e:25:06:b4:ce:96:d5:e3:
                    9a:2b:07:b3:80:02:e4:9a:d7:6f:32:25:3b:6a:88:
                    10:72:2a:d6:6d:c9:67:5d:3a:c7:6b:8f:f5:39:c7:
                    ac:af:2e:12:43:ad:ce:dc:15:73:97:aa:9b:de:54:
                    9c:7c:fc:09:05:c6:8c:ff:4e:43:dd:40:02:47:09:
                    87:63:fc:25:21:9a:03:91:5c:73:8f:cf:3f:b8:72:
                    d2:a5:2e:df:f7:ad:97:a7:1e:b8:8a:25:73:57:97:
                    0f:61:27:5b:d1:18:5e:1b:7f:8f:a3:28:92:7d:c1:
                    81:6b:30:b2:59:6a:de:f9:10:61:42:4c:42:70:99:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1D:E7:63:5A:33:19:A0:F3:9D:12:87:8C:E5:06:17:99:76:66:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/2bf07e84-bc82-3e7b-96db-63ef4dde1fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl

            X509v3 Authority Key Identifier:
                keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f9::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:96:b3:ac:4d:d7:7f:7d:4e:3c:01:fd:7b:07:f7:b9:1d:
         33:f3:73:55:75:13:5c:23:56:d6:da:de:8b:26:56:b5:c5:48:
         6e:f1:c4:70:25:72:f3:9d:bd:b8:fc:8e:62:53:9b:86:50:4a:
         f8:dd:ac:0c:10:50:1c:35:36:00:f3:cb:51:9e:a9:4e:b2:d4:
         23:01:8e:2b:b7:95:f6:16:d2:f1:b6:cb:d3:8a:9f:e4:00:6b:
         cd:06:fa:00:e0:6a:90:de:23:74:50:bb:27:91:61:de:b5:2e:
         0d:a6:3d:d5:b9:65:66:66:18:ec:38:bb:1d:1a:b0:21:1e:0e:
         e6:58:4a:b1:20:93:b4:23:98:02:fa:42:db:2e:c9:75:47:df:
         1f:f2:56:cc:a7:2a:72:f7:c6:5e:a2:cd:19:57:22:76:ac:41:
         72:76:d6:2b:ef:5e:4b:9b:ab:4c:79:f2:8f:52:ec:71:55:9c:
         94:c3:22:6e:44:f9:b7:1a:c6:50:c3:a0:4c:4e:8c:b6:40:32:
         e1:49:e9:2e:d1:0c:de:91:69:54:29:e4:f1:cc:47:ab:0e:35:
         31:9c:a8:85:d4:9b:ec:0c:51:26:14:57:07:ba:71:23:06:57:
         be:d2:bd:c1:07:e4:cf:df:20:83:f3:58:28:28:51:45:a4:1b:
         de:ed:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:53:52 2025 by rpki-client