Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
File:                     f321ea97-8906-32ec-a1b5-79839e8eae51.roa (raw, json)
Hash identifier:          2bobIBXmznlVXj5hgiNYhcUBRUR3RKMd9G+svIswG5k=
Subject key identifier:   C9:E4:A2:6D:6A:D0:45:A4:8F:A4:FB:79:E3:5D:9F:A1:F3:45:A9:E6
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A03A547A3CD3FB460A398C960
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     211066
IP address blocks:        2605:640f:640f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:47:a3:cd:3f:b4:60:a3:98:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=40b780c7-736d-4718-8d95-888995d58678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:68:e5:30:6d:22:2d:d1:fb:de:e0:bd:91:
                    f7:18:b0:31:9a:71:b3:b5:57:4c:1d:aa:e0:87:5a:
                    e3:0a:dd:fd:f2:16:d7:b4:4e:1d:ff:7d:b6:02:51:
                    07:60:40:d0:26:39:c4:01:81:1f:59:58:9b:d0:d2:
                    39:c1:88:f5:f2:32:8a:bc:2f:45:25:49:1b:0a:fc:
                    b9:6b:d5:f3:6a:19:7a:43:95:ce:76:16:a2:b3:1e:
                    ca:96:9b:e5:0f:3f:8e:9c:04:79:8c:fb:30:cc:a8:
                    6f:8b:ce:2d:01:7b:8f:f2:d7:ef:de:10:2e:6f:04:
                    9a:2d:f4:a8:03:83:99:4b:fe:cb:1c:41:d7:7e:c6:
                    dd:05:5c:2d:f9:0c:b8:20:7a:c6:98:e4:1c:0a:8c:
                    47:95:4a:cd:22:cd:52:e2:b1:72:8e:03:2b:ee:78:
                    b8:d6:32:06:dc:9f:0f:e2:0e:7c:34:5f:b6:45:80:
                    36:58:5a:6e:6c:3c:1d:17:1a:81:70:a9:e8:c1:09:
                    7c:7d:74:8e:73:4c:85:66:77:8e:62:3c:b0:e5:0f:
                    42:97:3f:fc:92:1e:9a:cd:3c:11:1b:b6:fe:4e:1a:
                    e6:fa:6a:2c:80:0c:fb:ed:00:c0:09:04:78:51:73:
                    76:31:9e:08:94:f1:c5:35:2b:23:a3:b9:a5:41:47:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:A2:6D:6A:D0:45:A4:8F:A4:FB:79:E3:5D:9F:A1:F3:45:A9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640f:640f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:06:a7:d1:30:6d:71:a6:18:4a:b8:77:89:c6:53:12:cb:
         8e:0d:7e:49:4a:f1:b4:1e:0a:5b:95:33:91:77:81:cc:3c:29:
         09:f7:69:0e:f3:44:9d:79:8c:74:0e:dd:39:86:0a:70:4b:0f:
         ff:b3:d3:e0:e5:1b:e8:29:bb:a3:4c:21:ba:9d:d1:a4:30:ed:
         2e:b4:d5:2b:61:d6:c3:f7:d2:c9:de:b1:c7:f6:c7:31:f1:b2:
         db:cf:e2:6b:13:26:9b:9d:71:53:ef:19:18:97:96:c1:23:77:
         e6:c3:57:67:0f:be:e5:7e:76:f6:6a:bb:02:c2:fd:2e:a9:d7:
         ff:53:84:bc:f8:de:ce:94:ae:e9:ac:4b:93:98:12:be:4a:eb:
         6f:9f:3e:20:c0:ea:9a:4f:5c:cf:4d:c8:d7:1b:ef:ea:9b:d1:
         e1:e5:35:dd:4b:08:2c:88:de:fb:7c:e8:e6:53:2f:72:c6:a6:
         90:bd:c4:d5:59:e8:5b:a6:63:ad:55:ac:85:54:ea:4a:f7:29:
         a0:a3:7e:db:86:cb:fd:90:97:68:24:0b:16:6c:38:8e:58:c0:
         13:0c:18:ec:7b:ce:5e:73:7a:e8:df:e2:cc:e3:24:0b:0e:bf:
         cc:58:b9:1b:d9:64:b2:cd:76:d5:19:75:65:4a:1b:6e:5b:c8:
         51:d2:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:29 2025 by rpki-client