Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa
File:                     63873ce6-2d19-3bab-8811-f923fcbb5176.roa (raw, json)
Hash identifier:          pd2szFRMbd4Le31u5VWeupa6gmJOQr2Ee3p01RQ667Y=
Subject key identifier:   09:24:95:1B:BB:6D:C8:51:66:40:D6:02:C5:C4:16:A5:16:83:89:3A
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584A1E2AA09DD522DCD212815720
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     20150
IP address blocks:        2604:5040:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a0:9d:d5:22:dc:d2:12:81:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=6756c02d-c46d-401c-9e6e-a6580978644d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:33:88:0b:9d:c6:f2:65:88:ad:d1:7b:96:
                    b9:d3:64:19:b9:dd:d5:77:46:71:84:a9:8a:14:04:
                    f7:08:8c:e2:31:ba:58:5d:66:f1:9f:9d:3f:19:29:
                    e8:c4:00:f9:80:64:3a:c5:f9:e0:44:8e:a2:2f:15:
                    2e:4f:23:f0:7d:6e:50:70:ac:17:7b:3f:b7:73:99:
                    57:52:00:ef:12:3b:a5:3d:eb:3b:69:b7:74:10:b7:
                    fb:2a:cc:62:ea:5c:d3:9c:85:cb:e2:a3:58:2c:9a:
                    7d:22:10:e6:03:e4:d2:2f:92:d8:72:cb:9b:a1:13:
                    98:88:eb:b5:84:a5:f8:59:a5:e5:f2:e3:80:b9:81:
                    76:0d:66:2c:94:c0:6b:61:17:d9:27:e2:f9:4d:d1:
                    d9:c5:9e:71:39:16:f5:4b:3f:14:8a:3b:17:9f:10:
                    42:c2:66:26:17:08:a9:a7:d0:3a:a8:8a:30:2c:10:
                    a1:69:5b:91:c2:4b:bb:99:48:55:64:c0:27:b9:da:
                    04:af:a8:57:61:96:ad:74:7a:6d:66:a9:b3:e4:e0:
                    71:8b:63:27:14:05:8b:93:0c:8a:c4:cd:bb:db:25:
                    ce:d6:f4:c9:f3:da:5c:1c:8c:8d:25:48:f6:7d:60:
                    ba:93:6f:c0:cd:2a:ff:82:23:06:e8:0c:3f:22:40:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:95:1B:BB:6D:C8:51:66:40:D6:02:C5:C4:16:A5:16:83:89:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5040:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:48:93:33:33:53:92:a5:5c:53:6d:2b:eb:9e:5c:e9:6c:f3:
         90:bb:dc:59:9e:d1:4d:47:43:06:23:28:56:2a:08:09:72:8d:
         9f:b6:12:d5:cf:d2:7d:dc:e3:da:3e:13:7e:5c:c8:e9:38:12:
         6a:f6:33:79:0f:cd:45:3c:52:3e:4b:0f:86:ef:81:50:57:1b:
         92:2a:29:6e:4c:c8:56:fd:26:36:c0:37:ae:b3:41:5a:1e:ef:
         7b:7c:44:71:f8:82:a8:f5:89:e8:ff:53:06:6d:42:ba:73:b5:
         3c:a0:24:23:52:fe:3f:29:66:ec:04:eb:a1:12:44:2d:23:fd:
         23:0b:dd:23:e1:f6:98:a3:38:f1:ff:84:16:03:54:14:17:b3:
         a2:fa:79:f6:46:40:f2:ab:76:1a:dc:64:08:18:bc:f2:23:a2:
         f8:5d:0b:2e:e3:21:88:eb:77:71:be:b0:26:70:f3:31:b2:51:
         0d:65:6f:f4:99:61:f0:10:f5:7b:f2:bd:f9:da:f9:06:bd:fd:
         98:cc:d6:3d:a6:45:f9:26:2a:29:40:48:16:83:6f:92:06:46:
         64:51:ed:26:4f:9d:ce:b3:a1:1c:33:ba:73:ed:78:a8:90:d5:
         1d:82:ee:50:66:b6:71:32:18:69:d5:fa:eb:55:f6:0a:2d:ba:
         36:a0:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:43 2025 by rpki-client