Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
File:                     6c592d11-a89a-3fc9-b153-3da1d346ca31.roa (raw, json)
Hash identifier:          nusIkbOBWxQt5gylsJAeDcmBgnwa28hzU40Rpe57Fao=
Subject key identifier:   EF:EA:51:A2:61:A0:43:09:7E:52:37:80:74:3C:B8:DA:73:E7:98:70
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F43285849D1650CB442A1B08B63E74280
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     401199
IP address blocks:        2620:ca:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0c:b4:42:a1:b0:8b:63:e7:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5dab6beb-7f86-4516-8e2e-8e4913e56079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:3c:e8:b3:a5:d4:4a:ce:57:f0:0b:42:3d:
                    e3:07:3c:b7:37:6c:e8:1b:51:f0:e4:03:cd:fb:f2:
                    27:72:be:b1:bc:d8:a7:c0:4f:4c:79:17:36:bb:c5:
                    88:25:67:2c:1b:f5:e3:46:05:7c:be:fa:27:36:e8:
                    dd:e2:7a:80:53:01:7a:42:7c:ba:00:4d:75:6e:51:
                    27:00:63:c5:1a:ed:8e:f5:ab:6a:25:26:3c:84:fd:
                    85:12:ce:ad:2a:68:5a:3e:15:dc:c6:68:8b:5a:62:
                    9c:50:c8:01:79:7f:2f:80:9d:02:4d:4d:29:37:ae:
                    8a:92:4b:97:bc:0d:b2:11:c0:49:7d:0b:31:6d:c0:
                    ff:46:95:dc:d4:8f:43:3c:db:d5:51:89:61:ee:fa:
                    d9:7a:b7:50:a4:ba:29:86:9d:63:bb:4c:13:35:f6:
                    c2:b1:fc:53:36:73:66:f9:26:64:f0:3f:61:59:20:
                    03:a6:5a:24:b6:6e:b7:44:95:5b:65:fa:62:4a:16:
                    1a:ea:7e:ed:25:83:00:05:96:a7:a0:1c:2f:fc:bc:
                    cf:f2:6e:d1:a6:3e:98:ab:24:53:55:c3:ce:7c:32:
                    24:95:01:48:65:9b:cc:23:47:5b:4d:48:72:d7:dd:
                    e8:ec:97:bc:11:f0:26:e0:0b:f0:85:55:25:76:74:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:51:A2:61:A0:43:09:7E:52:37:80:74:3C:B8:DA:73:E7:98:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/6c592d11-a89a-3fc9-b153-3da1d346ca31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ca:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:d0:00:41:7d:93:07:3e:ea:54:09:ef:c0:50:0d:96:0a:
         b2:73:b8:bb:c2:15:02:ec:e4:8c:e6:b0:99:05:1b:7e:8c:17:
         77:31:50:ef:0a:44:20:95:ec:ee:bc:3f:15:a8:ca:08:5c:20:
         70:9c:d4:e9:d1:1c:e0:7d:5f:8b:b2:ee:53:4c:a8:7d:5f:97:
         5c:32:11:99:de:5a:11:a8:5d:31:98:55:ce:b6:a0:4e:3d:18:
         e2:73:c3:96:d0:84:57:3a:af:80:60:e8:aa:65:3e:06:aa:87:
         c6:e8:bc:ca:5d:47:e1:89:84:03:45:c4:4d:fb:3d:1e:3b:bf:
         5b:ac:38:0f:e6:36:2c:3e:4a:59:c9:6f:35:d8:d4:da:7a:08:
         7c:69:0a:46:52:aa:9a:fa:62:a0:9b:c6:06:b1:20:4b:76:28:
         84:e9:cf:f2:fd:65:fb:70:03:b9:9a:a3:61:c8:49:46:41:be:
         a5:4e:66:1a:62:cb:c9:d0:42:83:59:a7:1c:d9:47:e8:7d:c1:
         48:d7:9c:58:dc:af:69:8c:38:92:42:d6:f3:59:97:97:ed:ff:
         35:7c:6c:d8:e2:aa:11:7d:fb:77:81:99:9d:b7:78:9e:32:a5:
         91:08:02:ec:06:c4:db:ad:fe:7d:c3:99:f7:bd:2e:f3:e2:9f:
         58:09:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:44:18 2025 by rpki-client