Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa
File:                     b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa (raw, json)
Hash identifier:          8hjEVyYibH08+Q95IngNPPmTCw88nCmW1QPWmjRG6Aw=
Subject key identifier:   6B:C5:C2:F8:13:51:B3:61:EE:3F:E3:CE:E4:44:AD:D3:83:2D:EC:09
Certificate issuer:       /CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
Certificate serial:       010D0C9F43285849FA08D0481BB469879D0EDD00
Authority key identifier: 16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa
Signing time:             Mon 26 May 2025 02:23:40 +0000
ROA not before:           Mon 26 May 2025 02:23:40 +0000
ROA not after:            Sun 24 Aug 2025 02:23:40 +0000
asID:                     396305
IP address blocks:        2604:43c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fa:08:d0:48:1b:b4:69:87:9d:0e:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
        Validity
            Not Before: May 26 02:23:40 2025 GMT
            Not After : Aug 24 02:23:40 2025 GMT
        Subject: CN=b35162f8-af97-4166-a3c8-27d6e2fe3d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:6c:e3:d1:51:97:15:17:ef:18:0c:f9:d3:
                    4c:97:05:b7:ed:b6:53:6c:fb:b5:e9:a0:87:48:24:
                    62:dc:9d:aa:28:8f:82:dc:b3:12:10:4f:82:ac:46:
                    f3:6b:fb:df:e1:ff:dd:da:4d:24:55:7a:b5:db:c0:
                    e5:67:c9:25:84:b6:0b:3f:62:9b:26:7d:8b:cf:5a:
                    67:5a:1a:38:3f:10:6d:ed:11:69:aa:e0:a8:ad:23:
                    de:39:4e:9d:5a:f5:69:1d:81:a3:38:35:60:0e:d3:
                    e5:31:7f:c4:0f:09:89:b1:67:e6:57:7a:28:e8:f5:
                    47:be:31:96:87:78:1f:4c:04:44:40:aa:44:1a:cd:
                    73:1b:b8:f6:61:9d:18:27:69:e4:86:1d:d5:18:f6:
                    b4:7a:2b:73:86:1e:88:b3:c6:8f:8f:4c:90:22:52:
                    db:53:5b:bb:28:2e:cd:76:69:ab:eb:3b:6c:e2:c5:
                    af:af:2f:26:ee:34:ee:a2:53:79:53:fe:70:95:8a:
                    18:f7:f5:32:74:0b:40:5d:99:cb:f5:28:8e:86:f7:
                    29:8d:5c:4c:40:69:95:49:3f:cd:b6:be:12:63:9b:
                    fe:47:43:0f:12:56:07:df:af:de:3e:a0:cd:f8:8c:
                    53:d0:54:91:96:a4:a6:35:3e:89:67:11:65:af:5a:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:C2:F8:13:51:B3:61:EE:3F:E3:CE:E4:44:AD:D3:83:2D:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl

            X509v3 Authority Key Identifier:
                keyid:16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:43c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:44:82:43:9d:60:d1:7b:01:78:a1:62:29:86:d8:a4:ad:
         cf:c5:f9:52:ed:5b:dc:ca:2d:2b:e8:3d:5e:06:d0:4f:bb:f4:
         d6:69:a2:ea:34:12:98:5a:8a:ad:1c:6a:fc:91:b6:d1:f9:a4:
         80:63:a7:b2:90:c1:c5:18:2b:64:02:ad:96:55:3a:f6:82:27:
         52:53:4d:47:5d:4d:70:09:df:12:55:df:36:98:84:69:2f:ec:
         0b:90:45:66:c5:86:08:4b:1e:cb:78:6b:d0:4a:d5:1f:d4:20:
         3a:2a:ba:40:4c:60:97:f5:42:38:c8:e7:c5:36:43:9e:43:3f:
         76:3a:46:76:5e:d5:f8:f6:e6:0a:62:19:47:d0:b7:9c:47:b1:
         c3:c6:3b:f6:3e:6e:48:66:4a:a7:11:4b:13:a5:06:b1:5f:6e:
         7d:08:2a:8f:8f:5c:1c:9d:78:9d:36:02:fc:88:53:a3:ec:ea:
         8f:90:2c:ee:44:8b:9b:aa:cf:8a:ef:f7:3c:33:ca:c6:c8:8a:
         ba:8b:de:46:21:92:5e:b3:14:46:08:b1:64:2e:34:20:b0:42:
         6d:24:73:ca:90:3e:fa:76:23:31:69:1f:e7:b0:c6:a9:d0:57:
         c3:a5:09:1b:39:71:fc:e7:33:67:f0:3a:03:67:61:f3:d1:8e:
         37:ed:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:15:37 2025 by rpki-client