Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
File:                     d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa (raw, json)
Hash identifier:          7qKn50rNPPL30vQE9F2lyEcfDsUD9hgze+aF0t7KzQc=
Subject key identifier:   29:48:84:0F:26:29:19:60:C5:0A:68:F1:4C:86:33:3A:10:DB:D1:58
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584A10353756EBB1DFF4EA809AC0
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2604:f340:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:37:56:eb:b1:df:f4:ea:80:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=62413945-0429-4f20-8156-eb7b3b897401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:15:f4:2a:79:03:ba:2b:23:8b:5d:3c:9e:
                    3f:43:68:96:3b:d2:35:24:87:10:8f:96:c4:9a:72:
                    61:69:48:a0:b6:b1:33:0b:8f:dc:8c:7b:60:12:ad:
                    e0:6e:ab:cb:82:cb:ed:0d:c0:90:33:6b:db:ad:1f:
                    70:dd:25:21:55:a2:24:16:3d:70:a0:64:54:18:43:
                    da:32:90:79:4c:5a:bc:6c:56:79:6c:fd:28:d6:d4:
                    61:07:8d:f2:f1:07:5b:1d:20:dc:43:9b:fc:92:ac:
                    57:ef:3a:b8:12:21:65:5f:39:db:52:40:8e:e5:0c:
                    d6:c5:6a:8b:9b:d2:bb:7e:e8:b0:55:24:99:b5:0e:
                    6e:e9:41:ed:f9:e0:1e:52:22:06:de:44:af:50:d9:
                    3a:bb:bd:bc:2d:ad:55:4e:9e:0d:9f:7b:e6:7f:f8:
                    98:df:d7:28:85:13:25:e6:15:51:f0:37:cb:59:90:
                    1b:cb:28:75:e0:0a:b9:16:15:e5:41:11:3f:48:5f:
                    2a:8c:2f:32:d4:26:67:1a:78:99:5b:53:ae:be:5e:
                    92:f2:20:5c:1e:e4:14:00:fe:f6:a9:62:8d:fb:74:
                    2c:a4:86:c6:61:18:ae:fa:24:70:96:cd:12:f5:2f:
                    e5:ef:92:9a:ce:e7:7e:b6:a1:bf:05:70:13:d1:af:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:84:0F:26:29:19:60:C5:0A:68:F1:4C:86:33:3A:10:DB:D1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f340:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:de:12:f4:92:8d:c9:ab:f6:46:77:28:09:ee:50:9b:bd:
         8b:a0:87:ba:71:22:b2:c8:42:9f:94:91:98:9b:d2:20:2b:b4:
         6d:5d:43:d7:98:b4:e1:5c:dc:1c:07:89:fa:65:e8:63:d1:28:
         0e:26:20:73:22:e1:1c:71:80:52:4f:86:40:5b:d5:7a:7f:dc:
         5b:e6:9e:03:8d:62:80:d5:1a:f3:4c:b5:4f:bd:ff:50:bd:57:
         65:4f:45:c8:88:27:28:b5:16:f6:94:9b:1c:86:45:48:9a:9b:
         b7:be:ea:e5:07:ae:41:9a:d5:61:10:69:94:50:f1:c5:eb:4b:
         dc:03:cb:4b:bc:9a:0f:3f:3c:70:35:7e:f7:6c:c5:4f:4d:31:
         4d:7b:b5:f5:9a:76:f7:f5:d3:c5:3b:f5:06:8d:aa:22:f2:e8:
         ce:7a:ad:6c:a7:2d:c6:1c:56:f3:6f:bb:3b:c4:ad:bd:0f:92:
         e1:85:f4:00:62:f6:4f:71:90:9a:5d:61:aa:8e:54:07:7f:ca:
         f4:0c:a6:cc:cd:6a:08:e8:0c:3b:12:e1:20:45:bf:c1:9a:38:
         a5:f7:20:54:d4:50:a3:6a:05:f0:74:3e:3f:50:f8:23:9b:32:
         19:34:35:e9:6c:c9:44:37:de:96:fe:59:cb:10:fd:83:01:ec:
         9e:ef:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:30 2025 by rpki-client