Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
File:                     caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa (raw, json)
Hash identifier:          9a1ORRECB/2pOF9IAi1odq1zhD3xZwyIkoY1eBjhWYA=
Subject key identifier:   5F:7E:45:AE:4B:0C:D0:18:E7:B5:88:A2:B2:7E:EA:FE:E1:C1:73:A9
Certificate issuer:       /CN=d2de7271-9c81-455b-9780-55895b635592
Certificate serial:       010D0C9F43285849D6FA4B8ABC418BF3310AF398
Authority key identifier: B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     26042
IP address blocks:        2606:c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4b:8a:bc:41:8b:f3:31:0a:f3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de7271-9c81-455b-9780-55895b635592
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=15e0bd24-eb52-440d-aba3-f2a0d37db893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:57:c5:a1:98:00:91:32:65:de:af:f1:2a:
                    1d:fc:19:b1:fe:30:87:0b:1a:0e:9a:ee:45:24:11:
                    15:d5:a7:fd:6d:35:9a:b2:4d:7a:5d:a7:e8:93:95:
                    43:45:90:59:97:91:08:c6:c0:c8:b9:ce:a6:3e:f1:
                    1e:2d:23:c7:03:19:7b:58:5b:70:d3:9d:80:5f:49:
                    c8:0d:6c:ec:af:0a:fc:01:83:7e:2a:d6:9f:72:0e:
                    a1:b7:cd:78:d4:09:bf:1d:4b:a5:9e:8b:1f:ec:8d:
                    d5:e9:d8:aa:c9:f4:36:50:0e:c5:c5:e7:53:6e:eb:
                    e6:73:e6:c2:d2:3a:08:03:42:cb:f2:9b:23:31:35:
                    38:1a:5e:1d:b3:b6:cf:d2:2a:80:85:54:75:6b:16:
                    c8:a3:62:7f:9c:50:2c:9f:2e:43:84:9a:b1:a4:e7:
                    bb:e6:3f:16:d6:27:5a:d7:35:8e:38:47:4e:36:14:
                    1a:d2:ac:64:d7:6c:e6:94:b2:58:b2:52:b9:e7:40:
                    2e:2f:8f:a9:80:0b:7b:e5:e7:76:53:4c:b0:7a:5a:
                    b4:5b:fd:dc:23:be:cf:bd:6f:1f:24:5f:d6:9e:35:
                    36:1a:8d:31:4d:0d:2a:10:e8:fc:f7:47:a2:49:0d:
                    23:b5:cc:d8:21:9f:26:6b:3c:dc:43:d2:64:21:69:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:45:AE:4B:0C:D0:18:E7:B5:88:A2:B2:7E:EA:FE:E1:C1:73:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl

            X509v3 Authority Key Identifier:
                keyid:B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:05:f7:86:96:3f:ee:ce:93:63:3c:bc:80:0b:4d:3b:48:12:
         a9:b2:49:cd:f9:09:71:5b:d8:78:d0:3d:9e:1e:b2:f9:f7:67:
         3f:71:91:ee:26:3d:d6:ae:1e:b4:db:59:0f:b6:bc:60:2a:6f:
         5e:35:a7:2e:f3:cb:d2:32:38:26:5a:da:ca:ff:f8:0f:23:0c:
         b8:7f:ab:9e:96:26:db:29:d8:e4:05:79:d1:e2:c4:e3:18:52:
         8a:56:05:70:2c:ac:96:d4:11:51:0c:4e:18:60:70:77:d6:ae:
         43:e2:d3:34:a1:ac:38:28:26:1a:4c:f4:b6:93:b9:76:a7:c5:
         5c:fb:a2:81:ee:3b:a8:eb:61:43:0f:d8:5c:98:48:f1:76:74:
         89:19:fb:65:e6:f5:c6:34:09:ef:b3:71:dc:ac:cb:51:fd:cf:
         1f:86:84:ff:35:2a:38:28:9a:47:f0:22:f5:0a:f5:fd:bf:a5:
         dd:ba:ae:ec:46:bb:b5:e8:0f:a1:0a:87:54:a1:c0:85:cb:39:
         64:44:d3:91:fc:55:e1:7d:cb:c8:9d:65:98:5e:31:01:15:0f:
         78:39:6f:c4:26:83:b7:ed:6c:8a:c9:b7:f4:ec:32:cb:3d:4a:
         b8:87:15:be:47:fd:f7:5a:4b:9c:c2:d4:30:08:07:7d:bc:13:
         d1:86:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:50:13 2025 by rpki-client