Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
File:                     bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json)
Hash identifier:          K1FAf5IFw2LUpofLVv8kDa74nMAwofGllvB5gwDKbAE=
Subject key identifier:   30:8C:97:8B:42:45:1C:01:1E:B0:C0:79:EC:20:F2:3A:39:2E:20:30
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285849F17FC15E5C9D86FBC686E0B0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     16904
IP address blocks:        2600:a00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c1:5e:5c:9d:86:fb:c6:86:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6e06c03e-f848-4107-b053-54689530583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:5f:4a:e7:69:f4:c0:e4:a2:da:8a:2c:32:
                    0d:fb:ac:46:ec:93:8d:ad:f3:b4:3b:20:72:27:d8:
                    46:2c:78:8b:f3:59:49:48:4d:f1:7f:97:75:3d:82:
                    b9:9d:35:9f:c0:d4:09:54:52:17:d4:3e:7a:29:c2:
                    47:4d:75:d4:f3:a1:4b:5c:87:f0:9b:08:ca:d4:d0:
                    3e:3c:85:4f:eb:de:0c:81:1b:85:31:dc:be:53:ed:
                    05:0d:ac:97:a8:07:1d:71:e9:43:a5:35:ca:99:43:
                    bf:f7:c5:04:72:25:34:9c:e2:ac:2c:4a:25:11:c6:
                    2d:0d:07:4e:e5:8a:b2:5b:5c:05:c3:69:e2:e3:da:
                    e0:43:a4:e5:1b:94:4d:8e:7e:3d:b0:b5:1e:dd:c6:
                    44:de:77:05:d3:cb:7c:2c:89:44:88:17:38:62:28:
                    44:af:01:73:b5:54:fb:2d:3c:40:1d:15:c1:7a:97:
                    d5:3f:cc:fc:ac:9f:25:d5:24:23:78:1d:2a:25:d8:
                    ff:05:6d:69:35:58:54:15:9c:05:50:77:89:38:06:
                    17:75:31:f0:0e:ba:3b:64:46:43:3e:fe:08:2b:50:
                    09:2a:83:05:65:94:18:90:36:a0:a6:8a:bd:9c:91:
                    85:99:0b:0e:c0:62:4e:47:4d:05:aa:2d:4f:b3:49:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:97:8B:42:45:1C:01:1E:B0:C0:79:EC:20:F2:3A:39:2E:20:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:30:a0:09:99:a3:16:79:36:28:60:20:a8:00:10:97:cc:42:
         a7:91:30:f9:34:13:2f:60:2f:1a:e0:71:63:98:7f:4a:c0:20:
         ff:bf:77:c0:72:03:94:6d:d4:06:d6:f0:c6:d3:5b:e5:2d:57:
         5a:02:9c:84:af:bc:03:2b:46:bf:72:80:46:49:d4:bc:72:d9:
         78:dc:6e:4f:ed:59:2c:cb:56:43:a8:78:fc:3d:89:f3:53:0b:
         a9:8a:d7:62:8b:bc:1b:37:e6:2e:cd:8b:3f:8b:c5:4f:c9:5e:
         e1:7a:ea:5a:bd:ba:72:aa:7a:30:1f:4c:6e:d7:9d:e4:a9:06:
         a7:54:3c:8b:d7:79:8f:38:70:11:d9:c9:60:19:11:79:b7:3a:
         7c:56:dc:70:9f:d6:b4:ea:61:d3:ec:de:0d:50:66:35:06:22:
         c7:95:e4:6c:df:d6:96:5e:85:27:87:23:6a:91:4b:8d:44:1d:
         1a:9e:2a:17:66:87:df:4c:62:1f:7e:de:c2:39:65:a2:80:d6:
         6f:e1:86:a6:43:4b:be:d3:40:8e:f9:ff:bb:30:e5:46:c6:cf:
         57:1f:af:55:ec:43:c3:61:65:77:37:87:77:bf:b6:96:33:56:
         c4:80:a2:36:4b:2a:61:be:83:ff:f4:63:3c:02:cd:cc:ac:2c:
         c6:db:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:10:58 2025 by rpki-client