Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
File:                     f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json)
Hash identifier:          E/gEb17MQTCVcSl/3tOur8WyJcbqPqDon5UCzWppVS8=
Subject key identifier:   0E:7C:82:5D:E3:20:B5:4E:C6:F0:87:FC:5D:86:69:DA:D8:B5:73:8C
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F43285849EA85233596DAF8CBE8F92D60
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:23:35:96:da:f8:cb:e8:f9:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=4ce67b87-c137-42d4-a2bb-00f7bfc051dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:30:e2:b3:87:26:fc:04:40:0c:2e:82:07:
                    e4:61:fa:5c:e5:74:ff:0d:59:79:b7:34:ec:21:c1:
                    fb:af:e4:40:18:1a:a4:e8:9e:a0:33:5f:5c:24:1d:
                    e5:b0:4d:50:65:fb:7e:5a:75:7c:77:5b:4c:03:4c:
                    8b:06:0e:b6:b8:53:b9:d9:9b:c9:6d:e8:c2:62:29:
                    51:2d:8e:0d:a2:46:92:89:29:a1:3c:ca:47:92:c4:
                    9d:51:e5:b1:40:e2:af:48:30:67:ec:9b:2c:43:e4:
                    64:e5:ac:d8:96:b9:74:d2:81:67:05:a8:26:cb:42:
                    cb:72:3e:f8:f2:f5:96:20:2c:b0:fa:1b:0b:1f:ae:
                    5a:e3:9b:7d:0a:ae:5d:82:3a:50:41:c6:55:ea:ba:
                    48:f8:f3:3d:be:93:a4:76:03:ee:7c:6f:5a:36:68:
                    c6:2a:1b:33:30:85:cc:63:5b:cb:26:04:10:c6:7c:
                    66:36:ac:81:c1:b2:70:77:f8:f5:ed:ed:68:f1:23:
                    5a:91:c4:65:96:09:fe:79:db:67:4e:71:fe:4d:c2:
                    04:49:df:5e:10:48:8b:71:74:52:c4:14:25:b9:fc:
                    ea:da:b5:4d:8b:a4:a5:70:4d:dd:e7:e7:28:40:6a:
                    40:eb:68:7a:db:e3:3c:bb:4e:9e:da:16:3d:c0:a4:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:82:5D:E3:20:B5:4E:C6:F0:87:FC:5D:86:69:DA:D8:B5:73:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bb:67:9b:ff:f0:f3:5c:c3:0a:37:9f:ff:a4:1b:b5:3c:bb:
         85:57:9d:6f:e7:4b:35:5f:a3:13:55:26:d5:e9:36:1a:42:c9:
         6d:ed:5c:2b:74:3c:e0:bd:4c:d9:9b:50:97:7d:47:f8:f5:ba:
         e8:e4:63:fa:4e:5e:e2:fb:1f:10:2d:1c:af:63:72:e2:92:41:
         3c:98:f8:3c:f4:21:ef:33:b1:db:7e:b7:c8:e4:04:f5:97:24:
         7a:09:a9:b9:b7:e3:52:99:f2:3e:8f:3b:5f:cf:1b:66:45:dd:
         f5:d7:b9:d7:5b:8b:2f:09:31:21:82:52:3a:07:ec:83:43:ff:
         b0:15:31:b8:ab:ba:32:46:11:16:87:b0:fd:31:91:98:fc:58:
         3d:86:37:37:f3:06:30:af:51:b5:64:33:0c:61:23:a6:ae:0e:
         d3:36:1b:63:8c:36:ce:ac:92:a4:ad:71:7b:90:7a:1f:85:52:
         4f:61:68:ad:e6:ef:9a:95:60:ff:aa:93:30:0c:4e:03:97:19:
         b3:fa:c5:23:b1:b1:83:86:e8:a9:5b:d0:54:4b:ef:90:f9:2c:
         d2:33:1a:c5:28:95:cf:11:f0:60:b1:00:8d:1d:8d:a2:1a:b4:
         a9:7e:35:17:8e:80:a5:5b:19:3f:1e:fb:93:37:8b:fb:57:38:
         5b:2a:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:42:37 2025 by rpki-client