Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa
File:                     b945615a-979a-3073-b0e8-fef7d9d7a16c.roa (raw, json)
Hash identifier:          fbkEhf0IkUCB/xr5MghXaZPuGWCoUHdSN8xa++8xuYo=
Subject key identifier:   C9:CA:D3:BC:F0:6A:A8:5D:85:83:CC:D3:E8:B2:E6:AD:D0:88:71:41
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F43285849C4D4CB6B98427B58B92B7D00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14956
IP address blocks:        2605:7980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cb:6b:98:42:7b:58:b9:2b:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=2009d68b-1ac2-4c21-9e03-e1331eef8ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:59:aa:34:44:11:8f:0e:c9:1e:7d:42:f0:
                    b7:9a:1f:9b:d2:19:3e:71:3a:ef:e0:b1:37:24:37:
                    ca:04:d6:ee:1d:ab:f0:23:e2:3d:97:42:32:7f:15:
                    52:21:0e:9f:fc:d3:c6:8f:87:cd:30:27:b7:f8:3f:
                    98:f7:9c:49:df:e1:ee:e2:90:2b:6d:93:fe:ba:7a:
                    b2:04:58:cc:27:9f:dd:be:90:82:25:14:74:93:f5:
                    a0:c5:2e:53:ae:86:f6:93:ae:8d:06:1c:7b:1f:96:
                    95:d8:4e:2d:ce:7b:4e:ab:04:83:e2:25:a6:12:4c:
                    c6:5f:b1:71:0e:74:de:55:3a:91:bd:10:1b:9c:42:
                    11:0c:ce:73:57:2c:86:f9:35:64:21:28:f1:04:fd:
                    82:13:f7:5d:2d:d8:43:01:14:c5:9e:0c:b8:7a:99:
                    8a:ef:7f:49:30:00:73:6c:bf:f4:b4:d8:e0:65:f6:
                    89:a8:05:3c:f4:15:98:93:ff:b4:4a:5b:40:0d:c6:
                    2b:79:ff:6e:b5:20:8d:8b:f4:50:f4:ed:07:35:1b:
                    96:72:99:d4:e9:5e:f7:31:89:2b:14:5c:7d:d9:fb:
                    d4:ba:17:b5:6f:43:c0:fa:ab:ba:f0:c2:dc:b9:71:
                    a1:98:6a:59:aa:a8:72:83:83:a2:af:67:41:02:c8:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CA:D3:BC:F0:6A:A8:5D:85:83:CC:D3:E8:B2:E6:AD:D0:88:71:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/b945615a-979a-3073-b0e8-fef7d9d7a16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:9c:16:14:43:83:68:24:a8:93:2b:a2:ef:e4:5d:2e:e2:
         65:6f:83:de:15:8d:19:4d:80:85:d2:f9:b9:cf:fc:70:f4:09:
         83:d0:b3:9a:a8:5a:73:f3:45:ad:7b:fb:ef:a4:c2:07:2f:db:
         f0:be:68:31:29:6d:9a:1f:d9:20:f9:8b:ca:71:78:10:1c:29:
         08:e8:38:e0:3f:70:7c:3f:50:d1:10:87:3a:a0:d7:da:41:ba:
         bc:9d:0d:fb:2c:5f:c2:4b:c3:6b:51:17:42:51:8b:e7:af:d3:
         a5:3d:0d:cf:ef:e6:06:56:85:7c:fb:11:8e:d4:08:1e:b8:bb:
         2f:ff:90:0a:aa:d8:74:40:1f:7f:c7:12:af:c2:6d:01:99:b1:
         31:e0:42:a3:44:b8:e6:54:d6:23:28:94:97:7c:20:b6:e8:95:
         de:16:d1:e3:2e:39:d3:25:4a:f1:24:2a:88:36:a0:ac:cf:19:
         d6:f1:82:a0:1c:c2:3b:84:02:b0:bf:67:64:3b:d2:bd:8a:b5:
         d9:82:e6:f9:6d:0c:aa:f3:a5:d8:e3:80:85:b1:4e:d3:49:d4:
         80:0a:90:c3:ca:0b:9a:85:a2:84:c7:ce:51:74:c3:a3:e5:a7:
         21:cb:e9:62:b1:34:07:54:90:2d:c6:d1:e8:0b:09:cf:f7:ef:
         73:24:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:28 2025 by rpki-client