Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/2d1306be-c252-300d-ae77-cdffa01b78cc.roa
File:                     2d1306be-c252-300d-ae77-cdffa01b78cc.roa (raw, json)
Hash identifier:          6mZQBUoSTzK3zyN9/sh5/WMHSLfjTJiEKkx7Lg5nKgM=
Subject key identifier:   84:6A:B0:81:D2:80:1D:01:C8:59:31:76:9D:E9:53:FA:A8:17:75:A9
Certificate issuer:       /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
Certificate serial:       010D0C9F4328584A1E2AA543C1CD4E67C720CC80
Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/2d1306be-c252-300d-ae77-cdffa01b78cc.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     398712
IP address blocks:        2605:f540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a5:43:c1:cd:4e:67:c7:20:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=c0c96198-407c-4629-9b10-af9a2a9153ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:eb:d6:14:77:19:6a:3e:74:4e:1d:0b:f2:
                    c1:dd:ca:8a:d1:32:54:e9:c3:48:17:e6:90:33:04:
                    58:17:04:61:01:5b:01:ff:16:db:fb:fe:81:ee:1f:
                    14:8f:24:88:18:16:31:8c:19:c2:17:a3:6c:78:40:
                    d0:97:44:e0:6f:47:ef:0f:73:f6:7e:66:61:82:8f:
                    d5:34:ef:81:84:24:1d:e1:a0:74:f8:db:a7:77:77:
                    7f:87:43:43:65:17:0d:8b:57:ea:5b:6d:f9:24:cc:
                    9c:d1:fc:58:2e:4e:f1:98:b5:5d:d7:3e:06:0b:ac:
                    e6:67:ac:e2:a3:ec:1f:87:88:9e:e5:44:8f:c9:6b:
                    a4:c9:6b:1f:2f:c9:71:48:29:01:a5:90:42:b2:55:
                    32:f4:bf:03:01:dc:e8:eb:db:ae:23:11:bb:26:94:
                    5e:3e:bd:eb:59:49:7e:14:26:9f:70:55:b4:15:e8:
                    a7:34:38:c7:6e:77:e6:ed:61:6d:90:4e:92:4d:13:
                    5d:f3:42:b6:fb:24:23:22:0c:26:17:91:f6:09:dd:
                    44:2a:6f:14:c0:76:90:27:ac:34:20:55:72:7c:1e:
                    2b:c0:ab:c2:9a:dc:c7:58:53:d2:47:ab:74:f0:fd:
                    32:cf:f5:f2:5e:73:48:dc:eb:9b:d2:80:d6:4d:a6:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6A:B0:81:D2:80:1D:01:C8:59:31:76:9D:E9:53:FA:A8:17:75:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/2d1306be-c252-300d-ae77-cdffa01b78cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl

            X509v3 Authority Key Identifier:
                keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:67:0c:aa:b3:ae:6f:61:45:1e:da:53:8a:d1:9b:9b:10:a4:
         d4:58:5e:5b:7b:f9:fd:60:c0:44:a0:13:f0:70:bf:d1:5d:23:
         83:db:a7:c5:1d:20:5a:13:75:c2:9b:bf:b6:df:92:76:e7:ac:
         4d:85:2b:15:f6:29:e2:52:c3:bf:80:40:81:4b:da:67:ff:8b:
         6b:5b:c3:18:f9:1b:1d:8e:03:fa:c5:45:e8:25:be:07:68:14:
         2f:37:9b:53:21:0d:02:50:d1:ba:f6:10:8b:e2:3b:29:e8:51:
         92:ca:39:7f:4b:9a:4a:1c:3f:82:78:76:b5:a5:90:93:64:3b:
         f7:dc:92:19:08:8f:1b:e1:eb:2f:df:be:ef:47:8a:bf:86:cc:
         1a:8a:07:83:af:4d:da:0d:99:c4:0c:13:5b:d5:71:1d:49:84:
         2c:59:06:75:24:f6:c9:c8:15:61:03:8b:ba:9b:cb:50:62:ff:
         6a:75:05:31:a5:9c:c4:b1:64:80:4c:81:b9:fd:48:e2:05:27:
         aa:8f:bf:6c:4d:dc:c8:3e:e2:4a:b6:30:11:39:08:63:d6:75:
         b0:e5:45:f5:97:5e:8d:27:a0:ed:be:b3:ab:f4:5e:bd:42:43:
         21:7c:83:59:96:8c:da:0f:61:5d:e4:82:35:4c:43:2c:0c:ac:
         66:30:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:03 2025 by rpki-client