Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
File:                     ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa (raw, json)
Hash identifier:          rSBgrfcjVREQqeqQQWrXbHpl9j3RkHdIoz4I9c4O0xo=
Subject key identifier:   29:3D:DC:F6:43:3B:E9:00:A5:17:D3:21:2B:17:1B:1F:7C:80:74:DC
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285849D594EC9874BC75AFB35A3680
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     399045
IP address blocks:        2606:d640:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ec:98:74:bc:75:af:b3:5a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=9dcf27e8-297a-4672-96a2-8c10df4d5769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:06:f1:f1:91:70:f9:f5:99:e7:c0:dc:c3:
                    bf:11:cc:43:52:39:34:51:4f:30:79:60:68:16:3c:
                    71:3f:bd:90:52:be:c2:58:b5:1c:76:2b:98:f0:54:
                    61:17:40:28:3d:59:f9:5b:8e:b1:9c:f8:dc:aa:fb:
                    70:49:e3:85:13:dc:b2:b4:29:c5:5f:9d:9d:e1:ee:
                    bf:da:66:85:31:a0:a7:5b:40:0c:7a:d3:ad:2a:2a:
                    dd:1b:29:8a:e3:0a:10:6a:dc:25:88:17:79:3b:2b:
                    e5:cc:16:dd:83:19:7b:12:bf:b6:da:93:13:db:40:
                    d9:c6:5d:47:d8:82:b9:63:7a:e9:d7:42:cd:28:9a:
                    82:4d:f2:0e:dd:cf:41:bb:62:f3:11:eb:eb:39:d8:
                    6a:70:e0:33:1a:ce:22:29:60:4b:fe:12:a3:7c:12:
                    23:75:4f:b6:26:d8:f4:86:8f:a4:2a:39:66:a3:77:
                    ab:fa:a1:00:e6:f8:01:bb:63:50:e0:27:d2:12:8a:
                    73:d9:17:e5:b0:0c:ad:de:fc:d6:0d:90:d9:1a:1d:
                    d4:9e:76:40:90:93:4a:d4:cc:23:66:17:f8:a6:6b:
                    d1:55:43:83:8b:02:40:15:3a:ea:ee:c8:bc:e9:68:
                    8b:63:70:8b:de:64:0f:20:4f:87:90:af:a6:6c:2e:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:DC:F6:43:3B:E9:00:A5:17:D3:21:2B:17:1B:1F:7C:80:74:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:71:7a:7b:bb:0d:e0:d7:6f:99:2e:44:a6:d6:5a:47:ab:8a:
         2e:b7:c2:d8:37:b9:c9:ff:ec:e8:60:2f:50:2b:da:4d:f2:7d:
         d9:cc:fd:ee:4f:a4:8b:74:14:18:7c:7e:a2:b2:a2:f2:e3:75:
         89:ca:b7:7f:ed:58:3b:d4:54:2e:c2:01:f9:5d:3e:a9:1d:3b:
         8b:9e:14:13:d5:82:24:09:34:79:ac:89:f8:5e:90:1d:87:ad:
         c3:3d:42:14:5c:d9:2d:8e:e2:3a:be:46:24:31:26:0d:db:85:
         dc:e4:2b:a6:e5:e1:04:8d:70:bf:31:75:e1:3c:c9:c6:40:04:
         3b:dc:0e:53:74:16:39:e8:4a:a6:1f:4e:62:a3:f2:9d:8b:f1:
         4d:29:f6:8f:e4:dc:94:56:17:f7:33:f2:72:a2:8e:81:52:17:
         7b:ba:2b:54:fb:23:dd:6b:c8:de:ce:34:f3:30:cf:f7:d2:d0:
         6c:c9:8b:1f:21:c1:12:cd:01:79:02:f5:6b:85:63:90:4b:d4:
         22:3b:80:32:b5:96:6b:3b:b2:1e:13:0c:1f:ca:b8:ef:90:d3:
         1a:e1:62:4d:8d:11:8a:b4:a7:3f:66:7b:bf:47:45:4a:71:7c:
         fc:45:aa:e2:0e:72:71:35:47:83:2f:8d:a2:c4:6a:cf:f3:5b:
         fb:dc:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:16:28 2025 by rpki-client