Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
File:                     a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json)
Hash identifier:          utUWVoJieJN/FCx/m2Im4mDe5LZbgOahWB7s6JEpiQU=
Subject key identifier:   FB:2D:D6:1D:2B:BE:98:4E:7E:BC:40:B6:07:35:73:4B:22:C8:B7:15
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584A2C200CE45B87FC2FE9206700
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     21947
IP address blocks:        2604:300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:0c:e4:5b:87:fc:2f:e9:20:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=13e5227e-2b39-4012-ab62-6e871fa11342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:20:1d:32:37:f1:d4:12:d8:1f:1e:58:6c:
                    15:e5:00:c6:6d:88:e9:f6:da:e5:59:f8:fc:7e:b2:
                    ce:17:e4:6e:e7:3f:c3:5c:97:21:46:b0:bb:f0:32:
                    21:6d:4a:ad:a6:c9:84:10:ea:c7:10:03:08:c9:64:
                    41:99:64:b2:08:cf:21:05:68:bd:5c:54:0b:21:04:
                    68:89:84:e5:8b:03:b2:95:0a:08:c7:51:5e:50:53:
                    27:bf:94:ab:f3:27:58:1c:80:c0:bb:54:2c:e0:99:
                    0e:48:14:29:7d:0c:6d:0c:29:66:80:25:7e:03:6e:
                    da:42:f7:22:22:5a:2a:e3:78:6d:a6:49:08:4c:bc:
                    fd:7a:dd:23:0f:16:a4:84:ba:0b:d2:dd:a2:d9:d7:
                    c8:5b:94:55:e6:33:a7:09:8b:ec:44:8e:8a:75:d5:
                    99:82:d6:90:a6:95:33:03:9a:bb:a8:a3:74:d6:b1:
                    e4:56:08:2b:a5:14:0a:31:7b:b4:77:0c:6e:87:c4:
                    a1:9b:af:c6:a2:21:9c:99:82:b4:d0:71:e1:b3:5a:
                    24:90:9f:f7:c3:27:b4:30:fd:dc:99:96:e0:ad:27:
                    85:26:65:a7:78:d8:b9:00:46:6d:fe:cb:a8:fd:c6:
                    f6:e3:54:00:51:3d:b4:01:f2:e1:ef:3c:70:af:e0:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:D6:1D:2B:BE:98:4E:7E:BC:40:B6:07:35:73:4B:22:C8:B7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:40:1a:55:e2:03:5f:47:81:d3:5b:39:91:62:b8:16:76:ca:
         a2:e9:3f:da:25:44:70:2e:0a:62:cb:ef:b6:42:13:fe:3a:92:
         47:7b:72:b6:50:e8:07:b8:ba:8d:99:7d:bd:60:b9:03:4b:7c:
         f5:7c:19:9b:dd:8a:27:b2:58:d8:9f:a6:d1:49:5a:44:71:9d:
         a6:1a:f1:3a:a3:3b:ba:76:f9:d4:e9:69:a7:c8:c9:34:dc:53:
         39:45:86:ee:3c:0a:c6:3a:ed:a9:5f:49:3d:f5:da:eb:56:a6:
         c0:c2:db:a3:e1:96:33:39:ed:cd:1d:d3:11:57:b5:10:90:89:
         a9:4b:30:4d:1a:f2:2e:2b:ef:41:10:1b:09:17:9e:0b:0c:87:
         22:c7:54:71:03:73:0f:7d:98:18:61:c7:a7:29:2a:d4:51:f4:
         1f:59:7e:f9:6a:7e:80:04:b6:65:d4:35:2f:b3:7b:5e:65:cd:
         cf:19:52:67:b0:bf:a9:4d:2d:14:6f:24:d1:cc:c3:28:f6:c6:
         e8:60:3c:65:0d:29:d1:0e:22:a5:c9:d5:14:ca:9b:13:c4:da:
         06:51:07:ef:38:73:ce:c5:ed:40:33:78:2c:3e:db:75:d3:e6:
         b5:a5:95:71:aa:ff:44:ed:68:7a:e4:08:30:91:e7:c5:f5:bb:
         de:12:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:25:18 2025 by rpki-client