Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/15760f9d-d50e-3b2e-82e8-b9e1b279ebe2.roa
File:                     15760f9d-d50e-3b2e-82e8-b9e1b279ebe2.roa (raw, json)
Hash identifier:          xaZdB4FVnMu6/dC+1ZFOPENYyIdbu/ZuPTfWR/GL62g=
Subject key identifier:   F6:2E:19:2F:8A:2E:35:AE:0E:8A:A4:5F:B4:50:D0:FA:0B:8B:FD:48
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B071A4E3C66E70DE44400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/15760f9d-d50e-3b2e-82e8-b9e1b279ebe2.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        2620:11a:c002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:07:1a:4e:3c:66:e7:0d:e4:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=eb28761a-b4a6-44b6-a2c9-03a05dcbc77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:95:71:91:c4:18:21:48:b6:ca:c8:54:2b:
                    a5:14:fd:5c:cd:38:cc:c0:68:e4:56:28:4c:49:70:
                    29:51:a8:0c:da:cf:f6:86:a4:f6:ec:59:27:f1:71:
                    7c:20:ab:cf:44:99:7b:0d:a3:47:df:20:62:ae:58:
                    9d:5d:01:62:51:5c:d9:30:67:b4:78:78:ba:47:7f:
                    e6:95:01:58:8d:ba:05:8a:bf:50:e2:0f:1c:d9:5c:
                    0a:3e:1d:93:a2:5d:99:3d:8f:e7:b4:08:0d:71:2c:
                    98:52:f5:3c:25:71:73:31:e4:eb:c4:ad:0d:47:67:
                    28:71:68:fe:34:c2:ae:fc:ac:5c:88:98:da:4e:4a:
                    b4:84:79:1a:6c:73:42:e4:e1:90:ca:a8:12:99:c9:
                    12:ad:7e:6a:a3:36:40:15:ef:c2:39:50:48:61:f8:
                    a2:97:4c:a8:bd:d6:b8:1a:50:e5:cd:19:12:a7:12:
                    3f:86:a5:23:da:dd:12:22:ee:c5:6c:1a:53:b6:2f:
                    4b:fc:c1:7e:e6:29:e8:f0:e4:fe:09:c1:ac:b2:58:
                    c2:d5:44:54:d9:64:e2:31:5d:40:1e:03:e4:80:b2:
                    48:e8:36:54:34:02:91:d0:8b:0c:c1:f5:a5:46:bc:
                    83:10:b0:fc:c7:7c:cf:c9:51:bb:0d:8b:6b:27:1e:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:19:2F:8A:2E:35:AE:0E:8A:A4:5F:B4:50:D0:FA:0B:8B:FD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/15760f9d-d50e-3b2e-82e8-b9e1b279ebe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:ec:b7:4e:29:0d:93:cb:76:e4:c5:b8:b9:8f:2e:1c:a5:
         0b:e5:14:7c:79:f7:79:5d:c7:c2:a1:b3:a2:c0:1d:e6:3f:86:
         04:c7:b1:cf:38:71:cf:25:0c:7c:05:35:ad:01:d6:2f:ab:7c:
         c2:ac:2f:03:d4:f1:2d:e5:c3:22:e1:9d:b2:36:3d:77:e9:c5:
         b9:c9:ea:0c:9e:60:3c:29:ff:92:3d:c1:13:2b:ec:8f:3d:15:
         18:21:f2:f1:17:74:90:ca:99:9c:05:cb:ba:14:7f:e3:95:0e:
         d7:c1:ea:43:e6:2f:01:d8:7f:84:d3:2c:b0:3f:39:05:fb:be:
         7e:0a:08:18:c7:03:9e:63:c0:a2:f8:78:37:ef:89:93:1b:74:
         8c:4f:4f:45:dd:37:5b:6f:b3:ae:8d:cc:80:72:82:81:1d:64:
         b2:86:6b:e2:fa:67:03:18:75:7d:8a:22:1a:9c:6a:52:4d:20:
         6f:27:aa:b2:94:4b:50:8d:0d:4f:22:23:99:a4:d0:f2:a5:49:
         e0:95:c1:98:98:fe:56:af:0b:f1:8c:64:09:13:00:79:6f:58:
         24:47:fe:83:44:79:70:26:5f:f6:1a:1b:e5:d8:34:75:17:75:
         9b:55:11:d0:a4:70:00:65:d5:67:5a:f9:c0:9e:2b:58:bf:22:
         13:9d:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:53:01 2025 by rpki-client