Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
File:                     ea1a9030-9438-32dc-88a6-09fec6a92edf.roa (raw, json)
Hash identifier:          FIxxNE7ZWEI+MQeD22ravdu2QwbMmi+W60aNDkKqAic=
Subject key identifier:   68:B8:F7:1B:8D:5F:C9:74:26:86:B2:04:4A:71:80:CE:9B:35:24:CC
Certificate issuer:       /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial:       010D0C9F4328584A103545B265633B3999B6A000
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     399519
IP address blocks:        2606:3bc0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:45:b2:65:63:3b:39:99:b6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=bdaee137-98f3-4631-90b1-4da4891d05d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:f1:bf:30:fd:4a:ba:1e:e8:b3:15:c0:34:
                    bc:2a:3b:f9:47:ad:25:02:f4:e7:d1:9e:7a:b9:90:
                    a5:54:2b:3b:23:dc:83:5f:e9:56:29:43:07:ad:fa:
                    bd:ba:3d:58:05:75:a7:71:95:27:f8:61:8e:eb:29:
                    5f:c5:d6:2c:88:2c:4a:2a:8e:15:70:24:ac:db:ab:
                    3f:d0:3a:ae:d3:82:3f:2b:ff:7e:59:f2:5c:6a:48:
                    3a:f0:8f:54:56:ad:2c:e6:84:2f:78:6f:f2:45:73:
                    5f:07:28:44:4f:9b:7e:df:69:1c:84:ce:6b:84:96:
                    d2:8c:f1:cd:eb:9a:e7:12:5b:0e:18:b8:5e:eb:cb:
                    2b:a0:42:55:28:c5:84:b3:e7:bb:29:e9:7c:78:e3:
                    f0:e5:21:90:73:fc:b1:6e:54:fe:ad:7d:15:33:b6:
                    df:f1:11:9c:7f:4f:bf:df:8b:bd:37:db:7b:51:55:
                    ac:58:cd:89:6c:23:02:e2:42:7f:1b:49:b3:05:2f:
                    0c:ad:bc:14:f1:e5:b6:7d:6d:00:dc:9e:a5:64:50:
                    2b:ba:f1:39:24:c4:d6:ff:fc:15:74:7b:f8:e0:6f:
                    c0:c7:68:c3:04:95:90:0a:74:8c:fb:08:d3:10:6d:
                    1d:7d:63:8c:cf:86:34:87:05:9b:f5:48:bf:8f:8e:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:F7:1B:8D:5F:C9:74:26:86:B2:04:4A:71:80:CE:9B:35:24:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl

            X509v3 Authority Key Identifier:
                keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:55:eb:17:57:cf:2c:8d:33:05:4e:68:e2:46:d7:58:25:7d:
         1a:40:88:65:c4:ef:23:e5:df:a2:2d:04:93:1d:4b:4c:a1:28:
         9d:e6:6f:c7:f0:0c:5c:2a:55:cb:01:e9:61:d5:a2:44:5b:47:
         55:e4:4f:33:38:6b:d4:7e:87:e4:a7:78:64:76:90:e5:a9:f1:
         6b:b9:b0:93:9d:0d:36:94:22:e9:0f:18:df:65:18:99:1e:45:
         ed:ec:53:52:c1:4f:b8:3a:47:ef:52:b2:62:93:05:e7:5d:84:
         84:fb:c2:a1:22:26:b5:dc:cd:98:3a:3a:44:87:b7:cf:34:e4:
         7a:97:ff:20:b3:67:8b:07:56:68:20:e6:b3:e6:aa:3e:50:c5:
         02:0a:4d:4d:14:ef:18:29:93:25:6b:cb:2a:12:64:bf:a3:2d:
         dc:91:e9:5d:40:f9:8e:08:cb:90:92:aa:91:58:4c:12:8e:87:
         ff:c6:e8:01:bb:81:c7:0d:2a:f4:de:4f:e1:38:16:02:64:38:
         a3:3d:95:79:3a:b8:c5:30:ab:8a:c1:11:bf:af:62:d2:39:29:
         79:5e:a5:17:52:65:ae:3e:ed:71:a5:1f:18:7e:4f:4f:f3:a7:
         a2:50:ce:7c:93:a7:22:28:9f:7f:94:92:2d:f3:38:eb:2c:fd:
         94:bf:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:37 2025 by rpki-client