Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa
File:                     5d063f51-fd5e-310e-8a92-8ac76afc695a.roa (raw, json)
Hash identifier:          BSLakejiYQJ9Zn8YBu/C83QpVJRySObNezAjR9nBoB0=
Subject key identifier:   9D:6A:C2:5B:F4:A1:1F:68:C6:EE:0F:DC:9F:D7:1D:65:8C:58:80:F4
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F4328584A2ABAE1D52770D316D034E500
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14203
IP address blocks:        2620:103:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e1:d5:27:70:d3:16:d0:34:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=e5514453-1a85-4698-b788-ba1d19546f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:90:74:32:99:77:ea:91:c0:b0:6d:61:17:
                    3d:68:c1:e7:6f:25:4c:5d:35:a3:57:6b:08:ce:58:
                    ec:4d:a2:97:36:34:44:b7:3d:45:90:fe:72:ba:94:
                    58:13:ce:26:fa:65:a4:eb:7a:6d:51:01:34:ec:db:
                    bf:ca:08:ca:ac:49:a3:c7:54:b8:4f:38:65:18:4c:
                    6b:38:98:f2:5d:92:9f:2b:09:00:de:a6:7b:42:f4:
                    e2:26:68:95:18:4d:21:d7:83:6d:ba:c8:6b:0b:31:
                    d8:7e:6c:55:87:a2:b1:bf:6c:56:dd:07:c1:de:ff:
                    90:27:c1:b5:bd:40:9a:8f:65:cd:b8:a8:10:2c:f1:
                    ce:fd:bc:a4:f6:1d:0d:48:b9:e5:f2:34:9a:fb:0a:
                    a8:8a:9b:d8:c2:dd:e3:62:0e:ac:23:06:0e:b8:2f:
                    00:f3:ce:08:9c:60:0f:5f:db:cc:a4:55:3c:09:7d:
                    63:ce:dd:18:de:bf:00:f2:25:d4:64:62:68:ea:f6:
                    d9:6c:c4:2c:99:92:50:ea:af:a4:a3:93:f5:dc:8d:
                    20:b2:e3:db:96:5e:58:6c:b5:50:15:e5:d1:1e:6b:
                    e4:2f:98:20:f6:b5:80:6c:87:17:24:43:81:82:3d:
                    40:1a:ae:ab:96:54:c5:21:db:3b:ad:a9:03:97:ef:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:C2:5B:F4:A1:1F:68:C6:EE:0F:DC:9F:D7:1D:65:8C:58:80:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:5e:8a:b0:74:14:d3:9d:78:0d:4a:bb:5d:ca:4a:60:1a:
         8f:0d:63:20:6a:be:13:ee:8f:d2:47:90:d4:7b:b4:5f:dd:87:
         5b:5f:76:14:5c:be:cf:3c:f3:a3:6f:05:3e:42:f0:24:cb:bd:
         f4:e1:ef:4b:ea:de:f5:55:80:15:5b:57:a2:e0:3c:8f:64:be:
         72:0b:c1:39:ff:b6:57:ef:88:ed:da:ad:cc:6b:6b:4d:d5:f8:
         b9:c4:21:d0:74:1c:72:e1:92:1d:6a:1f:f8:4b:33:3a:e0:ed:
         67:34:3b:b9:e9:42:ef:40:f9:08:4e:2f:93:14:5c:11:0c:45:
         84:d5:eb:40:a0:17:c2:c6:60:ba:d9:84:41:85:9a:de:0b:c3:
         16:ea:e9:6f:38:95:0a:c3:da:3c:39:80:bc:7c:95:f1:0a:c4:
         af:82:fd:ba:7d:8a:d8:bb:7f:31:11:57:52:29:87:1c:d8:52:
         cd:ab:12:41:ac:d1:4a:a8:57:5f:aa:18:f1:7a:6f:88:e4:9b:
         bb:95:ae:6b:fc:53:c9:d4:69:14:79:fe:7d:e0:7e:87:3b:19:
         c3:3e:bb:db:5d:80:3e:dc:7f:30:d3:1b:ce:3b:fc:77:11:b2:
         f2:d1:c3:01:56:62:59:5e:6b:81:c6:47:ee:d6:13:e3:a1:1e:
         d8:a9:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:12 2025 by rpki-client