Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
File:                     ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa (raw, json)
Hash identifier:          1+iIf8vgTGYJ8/LqkCxlqR1L4CnscmqxKv/WsKxwmBw=
Subject key identifier:   6A:2D:38:EC:13:57:E6:A1:65:C5:10:92:F2:51:B5:DD:C4:62:40:FD
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584A30503C49C13E4048AFFF6AC0
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     10911
IP address blocks:        2600:c00:2:3::/64 maxlen: 64
                          2600:c00:1002::/64 maxlen: 64
                          2600:c00:1002:3::/64 maxlen: 64
                          2600:c00:1002:4::/64 maxlen: 64
                          2600:c02:b002:12::/64 maxlen: 64
                          2600:c02:b002:13::/64 maxlen: 64
                          2600:c04:e002:2::/64 maxlen: 64
                          2600:c05:3002:5::/64 maxlen: 64
                          2600:c05:3002:6::/64 maxlen: 64
                          2600:c0e:1002::/64 maxlen: 64
                          2600:c0e:7002:b::/64 maxlen: 64
                          2600:c12:6002:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3c:49:c1:3e:40:48:af:ff:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=25118ddc-3aa0-4ac3-ab4d-242819fe437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:81:47:86:03:2d:88:b4:8e:8d:85:74:ba:
                    23:6d:b9:a0:1b:15:b6:8e:17:7b:12:25:d3:a9:c1:
                    c6:34:92:b8:1c:a5:2e:da:9e:e8:c1:9b:64:f7:7a:
                    10:f8:48:be:53:f5:a2:dd:0a:9c:80:e3:5b:87:ea:
                    33:8a:d5:19:35:01:1c:32:a3:8b:cf:0f:27:7e:41:
                    d3:df:eb:53:84:3c:20:8b:d1:36:e3:ef:de:0c:7c:
                    7a:58:44:13:1d:86:9c:17:6b:60:9e:2f:cb:39:56:
                    ff:b1:ad:fc:b1:7f:53:0a:29:68:3b:e5:62:24:f0:
                    32:55:7d:5f:bb:bb:3d:db:cd:0d:d2:95:e3:bb:c9:
                    1f:32:6e:8c:42:8c:d0:54:b5:ea:0a:86:a0:4f:94:
                    f9:52:6d:2a:61:8d:7f:db:35:b5:74:50:d3:5c:eb:
                    2b:62:5e:b1:05:b1:cc:7b:d8:4d:45:38:68:00:bc:
                    df:26:6c:07:5e:62:68:d6:e9:07:88:17:01:77:9c:
                    4e:bc:01:15:f9:df:37:a3:33:0a:53:13:97:7e:38:
                    28:ea:36:c6:52:eb:a5:0a:a5:94:ae:9d:bc:65:db:
                    11:e8:e4:38:fa:6f:76:0a:83:27:cf:d9:e0:7a:e4:
                    94:9f:cc:ed:2b:b9:68:b8:5e:79:6a:a1:78:50:1f:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:38:EC:13:57:E6:A1:65:C5:10:92:F2:51:B5:DD:C4:62:40:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:c00:2:3::/64
                  2600:c00:1002::/64
                  2600:c00:1002:3::-2600:c00:1002:4:ffff:ffff:ffff:ffff
                  2600:c02:b002:12::/63
                  2600:c04:e002:2::/64
                  2600:c05:3002:5::-2600:c05:3002:6:ffff:ffff:ffff:ffff
                  2600:c0e:1002::/64
                  2600:c0e:7002:b::/64
                  2600:c12:6002:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:72:52:77:bf:cd:06:f6:18:3b:36:c2:3a:47:3a:35:73:83:
         60:3e:4f:ea:4f:a4:1d:ad:4b:5c:76:11:ec:4f:4e:d9:38:c8:
         10:16:5b:6a:e4:79:3f:52:db:59:92:25:f7:3c:2a:1c:66:92:
         51:d8:2a:c5:67:68:98:5b:2f:b1:5d:a1:6e:3f:bb:35:fa:69:
         a4:80:ec:cf:49:03:80:6a:4b:0b:9f:11:35:99:b4:d3:6d:c6:
         36:62:9d:ef:13:ee:4b:70:b9:8a:7e:c0:96:6f:08:0c:33:75:
         99:9b:8b:f3:a8:4c:4a:c3:af:7e:c8:b9:2b:c5:09:07:ae:94:
         2a:37:79:ba:21:fc:23:d2:76:89:6e:c0:d4:72:13:26:5e:3d:
         ed:4d:c8:6a:f2:ee:d6:e3:07:48:5e:ad:04:6e:2a:90:1e:08:
         47:50:4b:c7:68:0a:c0:5e:63:36:a6:07:a9:5f:4d:d7:da:09:
         25:7d:17:0e:5c:d7:57:6b:8b:1b:58:92:53:c5:ae:7e:22:85:
         6e:f7:be:55:be:1c:98:5a:2f:ac:7f:fc:1d:ab:63:f7:4d:35:
         76:8e:6c:20:6f:89:2d:93:c6:a2:22:35:f0:74:35:c9:13:3f:
         68:6c:13:e3:19:62:f6:38:b7:89:2f:da:f6:18:14:97:84:08:
         bb:37:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:59 2025 by rpki-client