Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41ce9113-3212-3074-8131-f6538e5ea557.roa
File:                     41ce9113-3212-3074-8131-f6538e5ea557.roa (raw, json)
Hash identifier:          4r9Luj+H7ziOLpXB9jn8uDxmj9PkhFcCpcGnvrleTIY=
Subject key identifier:   4A:8A:C6:9C:C7:1D:22:74:CF:75:B9:99:30:87:A7:65:98:8B:D8:9E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B092C7DE19B6ED1335980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41ce9113-3212-3074-8131-f6538e5ea557.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        2620:11a:c020::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:09:2c:7d:e1:9b:6e:d1:33:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=20420e97-bd76-478e-bf3c-910ac05e7811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:e3:7a:e4:e2:3f:61:15:8f:16:ab:f8:3d:
                    90:3b:8d:34:f2:73:b3:ef:c5:06:a2:69:c5:bf:30:
                    11:51:e5:ba:51:44:9a:e5:58:63:09:f4:40:e1:54:
                    0c:eb:4d:3c:d3:97:c7:f2:5e:5f:09:ad:32:0c:65:
                    38:32:1b:da:48:73:98:4c:45:60:3e:0a:7b:75:de:
                    1b:79:70:8e:cb:9b:51:60:77:a0:4f:26:ca:9b:ad:
                    56:e7:84:12:83:13:5c:b9:f0:44:e5:96:96:7e:1b:
                    a6:d8:84:5a:93:c9:a2:3b:41:08:3b:58:ba:84:87:
                    28:f1:a0:c9:12:a2:60:e9:fb:4d:2d:84:2a:8b:89:
                    c4:76:a8:60:fd:76:3c:24:7e:17:38:65:10:ab:10:
                    b9:f8:de:6b:ad:80:53:fb:22:fe:fc:cb:54:50:1f:
                    6b:54:20:fe:8d:94:6b:45:fe:c5:5e:ed:b0:7e:b6:
                    79:35:c5:f7:d4:61:1a:d6:4b:16:31:67:04:fe:b4:
                    fd:d5:a9:27:9d:10:c0:31:d3:d0:1c:b0:c6:b1:10:
                    3b:d0:f5:39:60:d0:2b:db:7f:ec:49:32:4e:f0:3e:
                    c8:43:68:01:0f:bf:22:e0:36:8e:bb:77:e9:ee:8d:
                    5a:61:6f:81:30:72:cc:e0:51:6a:c6:38:16:8a:14:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8A:C6:9C:C7:1D:22:74:CF:75:B9:99:30:87:A7:65:98:8B:D8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41ce9113-3212-3074-8131-f6538e5ea557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c020::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:da:f0:de:d2:10:7c:27:b8:7d:11:cc:5a:96:e6:f2:bf:d7:
         bf:bc:ff:54:0f:8c:26:21:e5:8a:98:9b:a6:d9:7d:52:cb:23:
         4d:48:7b:2e:c0:36:f1:e2:f7:5f:ac:9d:bb:1c:fb:49:97:e4:
         f9:bf:49:2c:60:8c:47:59:6d:7d:dc:bd:40:a6:5d:ce:01:cd:
         83:c0:d2:8c:3b:f2:71:a3:33:4c:5e:0a:89:e9:01:3e:13:db:
         af:44:e4:9d:61:ce:0d:e6:1b:99:42:7a:05:16:1d:50:3a:bc:
         d8:c5:b8:cb:3e:0b:dd:30:04:6a:42:4e:b5:40:b8:3a:bd:f7:
         13:61:38:11:90:02:97:b3:4c:44:99:2b:4c:53:5b:b4:70:df:
         8c:82:34:a7:42:47:0e:39:02:98:b8:c9:8a:35:dd:7c:11:bb:
         7b:70:dd:ae:d7:da:0c:6d:e2:2b:ac:a8:d6:df:a9:73:cc:45:
         c7:02:6c:d0:8e:fb:5e:fb:73:a9:00:48:48:46:fa:1d:d9:59:
         d0:2d:30:6b:38:4d:d3:33:99:24:b8:6f:a6:c9:c8:2a:1c:23:
         6d:c5:b0:08:63:4c:56:21:00:f1:57:da:10:99:49:67:99:d8:
         d8:aa:ff:90:dc:38:96:9e:8d:28:d9:9b:45:6a:d6:0c:26:8f:
         f1:2a:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:58:38 2025 by rpki-client