Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
File:                     5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa (raw, json)
Hash identifier:          RfS+G4C9e+083PgPLougnA+tK8OrSlupBWxR3k9RaEc=
Subject key identifier:   9E:45:C4:B3:8D:6F:51:A7:C3:B7:7C:D1:1B:67:D8:5A:99:A3:FB:5A
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584A2C2012ABCB45049E1994D480
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     21957
IP address blocks:        2605:f440:5652::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:12:ab:cb:45:04:9e:19:94:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=ddd0eecf-a6a7-47e5-9460-07ffff0ab328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:7b:0e:be:4e:d0:6d:92:6c:f9:c8:57:28:
                    74:b4:2f:b5:b7:d4:90:4e:ba:94:39:36:1d:62:6a:
                    87:52:c7:91:c7:0e:81:12:6a:f3:68:f5:c9:8c:60:
                    5f:c5:be:aa:09:ed:ff:d7:a4:12:21:fe:24:47:f6:
                    c1:00:a2:63:5e:da:ea:b5:86:75:bf:0c:12:2d:2d:
                    37:a6:e8:08:93:2f:06:08:cb:4e:6a:3c:e1:ce:fb:
                    b8:b6:0e:b5:17:74:d2:38:d4:bd:54:ef:49:ee:4e:
                    ff:18:0f:2a:8a:a9:45:a9:af:13:04:d1:f7:2b:f1:
                    49:e6:fb:04:13:26:c1:7d:c4:f8:1a:0b:6d:80:93:
                    6f:96:12:20:d1:45:d9:e2:ab:4d:1a:59:5f:f2:b6:
                    d2:d2:00:23:c5:82:72:f1:4a:4a:16:bb:d4:3d:53:
                    6d:01:7d:ad:44:8c:60:29:3d:16:0d:60:3d:77:6c:
                    52:ee:13:9c:55:5e:e8:97:48:72:81:5b:b8:6b:d9:
                    6e:4c:05:6d:18:aa:89:71:51:4c:74:a8:1d:34:20:
                    61:a0:d6:d2:33:08:f6:43:64:d3:be:84:ea:31:cd:
                    47:08:d2:58:f9:b0:da:bd:5e:a4:4f:b0:a1:51:1b:
                    63:dd:a9:24:85:1e:34:10:f9:69:0e:13:af:a6:c6:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:45:C4:B3:8D:6F:51:A7:C3:B7:7C:D1:1B:67:D8:5A:99:A3:FB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5652::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:2c:ba:31:4c:1b:90:52:06:8f:f3:82:03:cb:82:50:89:
         d8:85:3b:2d:0d:2d:40:b0:73:cc:de:13:5a:5f:ba:fc:b0:19:
         88:43:c1:5b:76:09:bd:3a:e5:87:a6:75:1d:6a:57:a3:6d:95:
         b4:c9:29:69:0c:2f:0f:f0:e3:02:5f:b3:d7:1c:8d:2f:48:31:
         37:15:9b:ca:f8:a8:13:ce:bb:1d:c7:7e:d2:94:ed:ff:ce:5a:
         0e:aa:8b:97:67:19:27:08:0c:ed:c3:01:38:7d:7d:44:62:72:
         5d:85:6b:71:0b:f0:61:9c:19:da:2f:ff:84:23:b9:9c:31:52:
         2e:04:d1:e9:8b:f5:6d:35:0f:78:e2:6a:5f:b8:df:11:4c:44:
         fd:bc:9d:4b:a2:28:7b:5e:89:77:8c:a0:17:67:9d:b9:b2:a2:
         15:20:cb:95:0d:f1:09:6b:12:e7:27:32:f9:47:36:0b:2e:fe:
         dc:5b:bd:fc:b8:77:33:7c:17:7a:e5:c9:21:f8:f7:0e:4a:fc:
         44:ff:a3:90:cd:ba:15:57:19:47:45:98:26:92:50:f5:35:2d:
         65:89:e6:0c:72:80:51:2d:a9:bf:1a:d9:64:34:9f:1c:8d:d9:
         56:eb:03:7a:a6:ec:61:aa:97:81:40:07:5e:22:22:73:69:3f:
         90:91:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:02 2025 by rpki-client