Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          dKMbfwNk9Q9lQluHrIT/Tfxaq5Z8x6eIktkKFC8OD7c=
Subject key identifier:   D1:02:F7:0D:73:6E:BC:75:C0:7B:60:A2:63:8C:B6:13:C8:43:97:5C
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858498769AB59947FBA62B43AAD00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ab:59:94:7f:ba:62:b4:3a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=5266b244-f37b-43b6-91c9-9ba42ebb58d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:75:0d:bc:26:69:ed:0e:95:a9:09:6d:0e:
                    74:ff:48:0a:ef:0b:78:47:09:ce:08:96:f3:e1:5e:
                    32:a1:b3:92:8d:8f:2b:b2:35:89:a3:b0:c8:6f:51:
                    15:78:22:0a:d0:99:2d:68:72:15:b4:4a:ed:10:eb:
                    9d:51:b6:b9:95:2a:46:92:e5:da:6c:04:ae:29:75:
                    54:55:f6:c6:0a:e3:c8:7c:9a:d0:44:8b:21:aa:09:
                    8f:10:8b:77:04:64:8d:ef:22:ec:66:bc:52:85:bb:
                    1c:d9:dc:c8:1b:6b:ab:dc:90:f5:2c:33:1f:c8:f6:
                    ec:26:22:ad:31:ea:80:48:88:1d:7d:f5:5e:a7:63:
                    8f:81:d4:3e:b5:4d:60:cd:04:c6:41:93:26:c9:21:
                    ba:3c:2b:22:a3:0f:77:af:29:aa:96:a0:3e:e4:8a:
                    56:40:08:af:84:e5:a8:d3:4f:b8:79:0d:32:01:6c:
                    b0:8e:71:8a:be:39:82:8d:80:6c:cd:e9:b2:4b:2d:
                    0a:76:50:7c:0f:7c:70:39:06:34:47:cc:84:3e:b7:
                    26:eb:2e:c9:52:66:99:ec:2c:f3:2b:2a:a7:53:ad:
                    a7:67:ab:b5:e0:68:7c:2b:b1:a4:55:b3:7c:13:e8:
                    52:b1:fe:c1:2e:60:7f:36:bd:bb:00:dd:42:ed:d4:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:F7:0D:73:6E:BC:75:C0:7B:60:A2:63:8C:B6:13:C8:43:97:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:1e:c9:b3:a9:12:5c:d6:72:6b:6d:77:31:20:6d:ac:29:
         f4:7a:57:86:8d:23:2b:df:7b:f0:00:fe:d2:1e:8a:d5:d6:4a:
         f1:95:87:31:54:11:46:fd:b9:32:e5:11:1e:be:46:e2:87:17:
         79:95:04:1d:e6:fd:d4:0b:2e:3f:33:95:47:41:44:b2:33:fa:
         02:62:b9:84:38:4f:cc:c3:b2:9c:0c:83:dc:59:b4:f9:44:c5:
         8f:dd:83:ac:dc:16:c8:e7:df:ad:e8:62:dd:68:62:04:e1:c1:
         0d:89:50:ab:8c:f9:00:08:54:07:27:c5:98:9b:a0:0c:6b:09:
         e3:3e:31:4c:2e:9f:e0:d7:e5:c4:d4:8f:ab:a0:03:40:c8:46:
         45:26:92:6f:56:e2:aa:8e:a2:c6:18:db:52:51:de:fe:1a:c7:
         97:65:6f:c4:26:a5:38:97:ae:da:d7:f7:36:eb:dd:64:87:de:
         b6:d6:4a:ec:f0:49:45:4a:5b:00:1e:8c:26:ac:95:7a:c2:c8:
         75:95:f1:92:69:ef:66:49:d4:92:31:1d:e3:4e:cc:f5:c2:f2:
         06:f9:8d:5f:44:47:ee:12:45:c2:9b:ea:73:b2:f7:0d:62:46:
         80:74:bf:3f:55:53:c5:c2:92:d8:3a:16:14:aa:14:21:c6:f7:
         12:2d:b1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:06:15 2025 by rpki-client