Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
File:                     05eb7fae-7a23-3222-9621-15bd9592d38c.roa (raw, json)
Hash identifier:          E984aHVUpFH7THljbuMlUWSmrCcq5R4Dm1Ohs+VWWaQ=
Subject key identifier:   3B:A5:FD:D7:F5:F1:D7:0A:B7:A0:B3:52:89:86:C9:C0:D0:6C:0D:89
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584A189547B3E147936B0D73ACA0
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     397453
IP address blocks:        2607:3240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:47:b3:e1:47:93:6b:0d:73:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=2b039801-1fd1-42a2-bd85-38b8cdf7630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:ed:f2:bb:2f:56:f2:7e:19:26:2b:a0:17:
                    c1:22:cd:2f:53:b0:c9:d3:06:11:e8:49:03:a0:86:
                    b5:28:54:59:6d:8e:39:12:80:67:5a:5e:37:18:35:
                    b5:62:47:ec:2f:f0:c2:2b:ff:00:39:d7:9a:83:cc:
                    bb:25:b1:01:5d:e6:4b:b1:71:b1:d2:7d:14:a9:68:
                    13:d5:ad:fb:86:c2:c7:58:2e:fd:1c:15:00:b7:02:
                    3c:0f:81:a8:1c:0c:4a:f3:54:00:82:d4:e7:59:2d:
                    36:e6:e1:7d:ea:ff:28:6f:cf:95:32:c5:37:e2:a1:
                    ac:a2:d5:fe:60:f0:c7:01:51:a6:dd:b0:8c:17:95:
                    2d:7f:8f:60:b8:1a:4b:8c:13:54:2f:22:b5:47:5e:
                    a0:c8:a1:0e:0d:4a:6f:ac:62:74:2f:7f:da:7e:d6:
                    1f:45:0e:e0:7d:d1:ad:a6:d9:b5:a8:67:15:cb:38:
                    86:71:5a:a9:ca:72:bd:38:69:f6:ca:d4:f2:e6:3b:
                    f1:d4:06:88:5f:b9:c3:3d:2e:58:15:c6:b2:9a:67:
                    6e:27:c0:71:f2:00:bd:d3:43:a0:67:ef:60:ff:6a:
                    c4:04:11:7c:ae:e8:59:1a:7a:50:16:20:07:fb:36:
                    02:ec:8c:86:ec:3c:e2:83:ab:49:6d:97:a3:29:41:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A5:FD:D7:F5:F1:D7:0A:B7:A0:B3:52:89:86:C9:C0:D0:6C:0D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/05eb7fae-7a23-3222-9621-15bd9592d38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:08:0b:c2:35:5d:be:48:2f:5d:41:da:90:71:bc:c8:44:10:
         bc:b2:e3:8a:72:e7:c7:e9:32:17:f3:a9:a8:56:74:3e:9b:bc:
         7d:72:70:38:9d:2c:a2:e3:4b:2e:f5:b6:c6:55:7d:bb:55:a9:
         86:25:a4:44:57:98:85:77:06:26:c8:f2:02:56:cb:a5:5a:76:
         19:61:1b:40:7b:13:f3:9f:f1:0b:11:05:6a:e3:3f:c4:e4:c6:
         5a:2d:6a:5b:40:36:09:80:ce:5a:16:6c:08:ce:30:68:1f:7a:
         2c:f2:59:57:5f:44:56:eb:5e:e5:c7:9d:02:86:d5:d1:62:74:
         6c:1f:91:e3:cd:df:ca:fd:a9:ea:dc:c2:4e:06:7f:97:46:07:
         28:94:45:84:c5:86:ec:ad:01:e7:7e:5e:f2:9f:5e:d5:78:07:
         45:b2:a2:b0:02:15:18:b6:93:e5:fb:22:79:da:d7:bc:a4:60:
         02:9a:72:a3:e8:45:74:82:ee:79:a0:3d:99:1c:50:ab:a8:4c:
         f4:fe:27:56:d5:13:35:33:70:74:14:f9:b0:61:68:5b:61:83:
         88:3d:38:9e:ff:fe:2e:cd:b6:f3:6c:4c:a8:55:3f:27:2d:97:
         f2:81:d5:d8:01:10:49:23:9c:df:cd:7a:7b:b4:66:da:46:c4:
         89:18:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:58 2025 by rpki-client