Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa
File:                     06bbda12-d711-3cce-b40d-75c60650aa0f.roa (raw, json)
Hash identifier:          H42qzFk8FINCST7o+Ig21U0FQmYAoNOKzToavg/FtpE=
Subject key identifier:   4A:70:7D:08:9C:06:D9:51:9A:2E:18:A0:4E:D8:89:91:1A:DE:41:31
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584A74B5CC5893FF2589A0BF7900
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     394445
IP address blocks:        2604:d0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:cc:58:93:ff:25:89:a0:bf:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=541e66f1-a21e-44a2-86c5-8dbbceb15056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:89:e7:98:4d:19:4b:ac:ed:f9:e6:0d:67:
                    c3:2f:04:88:d5:59:c0:b6:28:21:92:d3:de:5e:58:
                    a9:ee:e0:16:27:4f:4e:75:76:93:b7:09:42:04:e9:
                    a0:2c:31:ae:0c:65:7b:b8:fd:7a:02:53:39:bd:99:
                    10:94:5d:32:84:a6:aa:1c:91:03:19:00:88:60:7d:
                    ad:fb:d3:69:e9:0f:c1:32:c9:7b:a0:9f:d2:e4:1c:
                    52:51:c9:c2:aa:b5:94:45:6c:c3:b7:70:32:60:b1:
                    3a:2d:60:11:8a:30:48:14:be:0a:6d:6a:d2:de:65:
                    9c:17:4d:0b:93:4b:0e:35:1a:11:f8:1e:37:f3:00:
                    38:9f:d1:b8:31:6e:cd:0c:c1:49:28:99:86:85:64:
                    a0:46:21:a4:8f:7b:48:91:57:f3:5a:99:d5:c2:b4:
                    e1:8c:03:6c:12:38:21:c1:e4:d1:0d:fa:57:f5:e6:
                    aa:75:e6:7b:42:f4:c0:78:b7:b6:9e:28:83:99:4e:
                    fd:d8:b9:65:72:f2:1b:75:4e:1b:56:3f:d5:00:6c:
                    d6:e1:29:61:3c:a9:c5:59:67:62:b6:4b:0a:92:36:
                    d1:a6:cd:03:2c:bc:25:67:cc:3b:7f:a9:a6:eb:82:
                    af:45:f8:18:d6:66:a4:3f:b1:70:35:6b:70:7f:53:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:7D:08:9C:06:D9:51:9A:2E:18:A0:4E:D8:89:91:1A:DE:41:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:4f:10:f3:ef:27:03:6e:07:17:13:c9:9f:66:32:7d:d2:
         ab:03:7b:16:39:70:6b:0d:75:58:da:f6:9d:70:b2:dc:a8:a9:
         07:9e:61:ab:6d:38:e9:8d:bf:0b:0f:e2:3f:65:60:ba:bb:42:
         79:2b:9d:cb:f1:fe:af:0f:c5:65:8a:8b:f4:f5:f4:be:7a:87:
         79:8a:3f:51:57:15:e2:51:f9:79:e5:a0:1b:bd:ed:25:5b:fb:
         24:50:2e:c9:77:fd:9e:49:2f:fb:72:a0:f3:5a:e7:19:c1:f4:
         8e:0a:f2:43:24:2f:a8:73:85:5d:2c:43:58:da:7b:c3:5f:40:
         8e:99:0d:10:26:2a:0b:5d:e0:b8:44:44:72:34:4d:5d:4f:88:
         d8:ea:1f:64:56:21:36:fa:08:94:ff:c0:15:83:06:9e:c1:de:
         45:e8:ae:a6:ea:3a:18:16:33:11:9b:57:43:e1:92:07:7a:bc:
         a0:d1:ed:be:79:69:d7:d4:c5:56:29:fb:db:f6:99:ff:a7:d7:
         ed:8e:a1:d0:7e:9a:39:5b:2a:1d:ce:1d:e0:2b:28:9b:27:52:
         a3:c5:98:06:e7:18:fc:6b:61:33:6b:26:fe:7a:44:a5:bd:4f:
         c1:2b:52:b0:4e:00:65:b8:aa:6a:15:f8:5d:c5:d9:17:16:c7:
         e1:4b:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:39 2025 by rpki-client