Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
File:                     68452c37-5a9e-3865-8fec-47bb4e783d81.roa (raw, json)
Hash identifier:          hTDngu/vPIStlfgPR9pAl7/t/Ex3JduH+poWXYatmd4=
Subject key identifier:   3A:FE:FF:8E:CB:C7:1C:7D:EF:F4:CA:C5:38:C4:46:6C:FA:A3:37:78
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584A2E75392952B1A9530FE7B380
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
Signing time:             Fri 13 Jun 2025 21:04:08 +0000
ROA not before:           Fri 13 Jun 2025 21:04:08 +0000
ROA not after:            Thu 11 Sep 2025 21:04:08 +0000
asID:                     395661
IP address blocks:        2607:bc40:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:75:39:29:52:b1:a9:53:0f:e7:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Jun 13 21:04:08 2025 GMT
            Not After : Sep 11 21:04:08 2025 GMT
        Subject: CN=33e700f2-3beb-4cd2-8098-8a4cbe2e60de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:8e:32:d5:d0:aa:12:08:89:44:ce:50:93:
                    75:38:65:12:c9:d2:f0:09:b4:fe:35:2d:4b:90:67:
                    da:c1:23:73:12:3e:e6:f6:b2:17:fe:33:88:a1:2f:
                    2a:de:0c:2d:76:f9:51:ba:9c:63:26:8c:8e:bd:93:
                    2c:3a:b8:eb:52:df:08:da:85:5e:70:2f:74:fb:5d:
                    12:41:f5:80:f4:54:62:16:30:5a:a7:45:6a:67:9b:
                    ba:e0:b5:37:38:6a:9e:00:ed:50:ee:99:61:91:b0:
                    7a:29:4e:92:fa:a4:bc:2c:37:e5:59:c2:6e:df:95:
                    2f:e3:9b:ad:5c:64:1e:09:f6:87:fc:1d:37:59:d6:
                    16:a9:bd:37:6c:ad:f2:bd:be:e9:1f:35:f0:19:f7:
                    1d:c6:c7:d3:a3:a1:59:a1:9f:29:2d:11:19:8a:5a:
                    25:84:7a:13:7f:c4:33:a0:5e:36:44:2c:de:18:a6:
                    30:d1:9b:37:13:1e:c2:ce:0c:f8:31:33:e2:d6:17:
                    d1:b8:4d:ef:87:ab:be:8c:be:49:58:24:07:3d:0c:
                    2a:82:d5:a8:1f:00:30:9c:a2:bf:96:a2:7e:93:98:
                    d9:c0:e0:ec:92:a2:98:89:0a:7b:88:70:2b:b6:fc:
                    67:14:a8:c7:33:66:7f:5d:06:fc:e4:be:10:5c:f6:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:FF:8E:CB:C7:1C:7D:EF:F4:CA:C5:38:C4:46:6C:FA:A3:37:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:b5:0d:62:ac:c5:7b:93:c8:29:b4:71:36:4a:df:b1:a4:
         85:70:8e:65:7d:58:57:a3:1a:79:3b:89:80:d0:91:37:1a:d9:
         07:03:80:c8:43:ca:e0:a9:b1:87:ef:3a:3e:b9:fb:73:3a:e5:
         74:eb:3a:8c:6a:43:e8:cb:7d:4b:53:87:06:e0:0b:9d:0d:9b:
         dd:fd:6e:f3:b1:32:04:d0:ca:a5:0c:48:32:a4:7f:07:46:16:
         2f:4b:13:0d:a7:e6:78:fc:36:67:77:1b:2d:b8:6a:8c:79:29:
         aa:7c:2e:69:a2:32:c9:8c:cb:d2:f1:13:fc:67:99:ec:38:3c:
         a4:b8:ea:b5:ba:47:a3:58:9b:44:df:00:88:87:eb:e7:32:65:
         35:bf:1f:74:36:b5:31:8e:14:18:ef:62:ce:64:bd:3d:0d:1d:
         9f:95:bc:77:a6:dd:ed:5d:1e:ff:ab:ba:91:f6:5b:5a:da:2c:
         1a:f9:0d:b6:4f:9e:16:ce:8e:a9:37:45:8b:59:20:f3:6a:c5:
         58:35:b9:a4:80:45:4d:38:95:aa:66:49:be:30:27:0b:97:92:
         26:03:c4:61:89:fd:28:9d:76:96:bb:2a:03:7c:a8:ce:52:11:
         ee:5b:24:16:ba:c3:59:46:20:49:d6:a2:01:09:04:2f:f7:2e:
         3d:9d:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:00:11 2025 by rpki-client