Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa
File:                     294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa (raw, json)
Hash identifier:          AzfwZv6HV72Qn9EGZkY0FAjL8Y2Cz9V3NorO9uiIE6E=
Subject key identifier:   32:3A:82:F1:61:FF:B1:8A:93:4C:EA:AF:B7:62:B1:B4:7C:10:D8:F1
Certificate issuer:       /CN=3299f656-5665-469b-8729-13b669bb2153
Certificate serial:       010D0C9F4328584A1B5FEF30952C7306C50E6680
Authority key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     23294
IP address blocks:        2620:0:1a70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:ef:30:95:2c:73:06:c5:0e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3299f656-5665-469b-8729-13b669bb2153
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=f940b3c5-1ec9-441d-9eff-e54569c4de6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:72:0a:2b:f8:7f:c6:72:87:67:b3:9d:da:
                    43:2c:53:26:88:0c:78:5e:53:a7:4b:fc:9c:0f:64:
                    1e:77:86:43:cd:c0:22:99:1c:9e:35:68:5a:58:02:
                    42:9c:bd:2d:7e:97:70:46:55:c8:ae:a7:b1:b8:ba:
                    40:5e:ff:62:eb:02:ef:61:03:7d:0a:13:6a:43:89:
                    e1:f3:66:31:17:48:b5:a0:5e:eb:ef:8b:e2:af:7b:
                    28:d0:9c:1f:89:ed:90:6d:aa:b0:1a:2a:3f:b7:6c:
                    02:10:26:e6:38:c0:ac:94:07:8d:f7:43:d1:1c:3a:
                    9f:8f:24:e2:9a:c3:b8:ac:85:a7:e7:33:ea:1f:6d:
                    3c:44:06:c8:66:c3:1a:db:c0:16:da:3d:4d:83:93:
                    13:cb:e3:3c:68:03:70:d8:7f:2f:bd:96:b2:2b:c9:
                    30:32:c9:fa:36:27:74:5b:85:1f:b8:af:43:35:d8:
                    f2:27:8a:9a:97:c9:e2:81:35:7e:91:4e:9b:5b:04:
                    bc:74:26:24:6c:41:8d:d1:ea:07:d6:d7:21:3c:09:
                    f1:55:b7:6a:76:f2:5d:65:e9:9c:17:fa:3c:2c:a1:
                    21:9f:9a:f0:70:e0:e4:d0:5d:aa:61:24:a7:22:ae:
                    b3:51:da:8a:1d:b4:d8:c9:d9:8e:20:16:2c:30:88:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:82:F1:61:FF:B1:8A:93:4C:EA:AF:B7:62:B1:B4:7C:10:D8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl

            X509v3 Authority Key Identifier:
                keyid:19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:1a70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:98:bf:54:b2:a0:40:7c:4b:ea:27:d8:53:8b:f1:ca:8a:fa:
         be:45:47:7b:9d:13:ec:54:90:2e:08:61:c5:5c:f1:c1:f4:51:
         2b:0f:fc:3a:1a:4c:83:c2:67:77:58:b2:da:d0:48:bd:6a:28:
         95:ef:7c:c6:5e:2c:a1:69:78:1e:63:6b:03:9b:5f:e5:40:63:
         8a:28:64:08:4e:23:15:6f:71:30:60:7f:07:c9:1e:42:88:4e:
         51:d9:83:fd:f8:a1:5b:8e:c1:cf:ba:27:9a:45:6d:1d:7f:b2:
         dd:68:fc:f9:0a:08:e4:51:16:87:26:e3:f7:29:e0:4b:a7:6a:
         89:54:91:ce:ed:51:ad:fb:77:8c:df:28:29:6a:56:b7:e8:d3:
         7c:fa:73:4d:67:05:22:c7:c1:9b:15:91:c7:51:ca:b1:5d:91:
         24:81:ff:ef:21:ab:3c:53:7b:26:8e:cc:c8:db:5e:9f:0d:53:
         cc:16:d7:01:54:5a:46:36:22:d6:86:1b:20:b5:a9:cf:fc:b8:
         e5:e6:60:b2:6f:c8:9d:cd:11:32:44:b2:aa:75:65:84:5f:11:
         19:cb:c3:f7:24:12:00:5e:c5:0f:fc:40:7b:3d:ee:9f:69:48:
         f4:bd:d9:9f:d8:e1:37:7a:c0:fb:dd:cb:57:18:2b:32:d8:c8:
         b9:dc:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:58:43 2025 by rpki-client