Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
File:                     b0c012f4-baa2-3789-9ae9-0736d044aafe.roa (raw, json)
Hash identifier:          7+fKOC/QzgQAcY0zSGcCmOoXgFa9TpZ8f4imEL+R6ao=
Subject key identifier:   D4:B8:25:FA:F0:C1:64:86:69:34:0D:88:82:F2:47:17:52:4C:34:5F
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584A305032155F6D2F69A0BAE400
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     27281
IP address blocks:        2620:116:800a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:32:15:5f:6d:2f:69:a0:ba:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=9d32b2ad-fec0-41e6-ada1-74c803f9dbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:07:d4:d2:82:d6:59:eb:3e:3c:58:38:75:
                    b0:a3:f5:9c:33:4e:37:a3:b4:88:eb:21:07:14:1c:
                    45:47:96:57:ec:bf:51:e9:c7:7b:99:7e:4f:bc:79:
                    43:04:21:2d:d3:b0:74:d6:1e:ef:2f:08:a8:e6:f6:
                    66:f8:59:42:b3:f9:fe:c1:0a:c1:fd:96:46:c8:60:
                    9e:0c:40:5e:98:2a:66:ff:31:7e:3b:d0:df:49:fb:
                    90:39:84:34:cf:3f:20:36:7b:bc:13:17:15:61:d4:
                    dc:ba:a2:b2:74:36:b9:c4:bf:70:13:3d:7c:72:5b:
                    f4:63:39:18:03:c0:64:0e:fb:3b:c9:47:ea:a9:f8:
                    df:24:45:f0:d9:56:7a:af:f5:12:c8:2a:3c:c8:f3:
                    82:46:30:27:6d:dd:31:aa:8c:fb:91:47:d0:e8:92:
                    d4:12:f8:9c:01:0a:25:c1:c9:be:2e:b0:e0:97:b1:
                    fa:46:60:6f:cb:53:fc:28:47:3c:b9:fe:81:12:7b:
                    5f:e1:88:85:95:29:7a:f7:86:c3:4e:ed:a8:51:ba:
                    73:01:c9:c4:33:7a:ea:a1:14:11:e3:e9:7c:72:94:
                    e2:d3:09:58:ba:65:4c:0e:3b:73:d3:a2:7f:e6:ba:
                    b3:60:9a:76:06:c4:a9:05:72:6d:67:09:fb:2c:63:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B8:25:FA:F0:C1:64:86:69:34:0D:88:82:F2:47:17:52:4C:34:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:01:50:c7:26:84:6c:ac:96:11:dc:5c:80:b5:02:ae:a2:
         89:2e:c0:cb:f0:8e:41:77:ce:df:2c:88:d2:9f:9a:16:dc:9e:
         90:cf:13:28:51:4b:70:3d:47:22:aa:d5:c7:66:0f:0d:f8:ff:
         f4:48:4c:e6:8f:bf:6b:a0:a2:42:46:b5:c4:01:42:1f:7a:f2:
         b5:f6:97:3e:7a:5e:73:9f:14:6d:49:b3:0d:c3:1d:dd:8e:88:
         ac:96:e4:e1:fe:88:14:e9:08:27:25:72:ca:e6:84:fa:b2:13:
         68:94:25:e8:d9:4a:60:5b:ff:a3:e3:2a:ee:fd:32:6a:7f:a2:
         44:b4:5c:8c:f7:d9:f3:ac:e4:06:ab:04:5b:a6:b0:72:51:af:
         79:b6:85:94:c6:02:53:42:ab:50:1e:ce:16:31:e8:47:99:cf:
         0c:91:b2:ca:38:3f:5c:b5:72:cf:0f:f5:ad:8e:b6:2e:b6:50:
         e7:07:10:6e:8e:a7:b3:13:ac:fc:8c:bc:2d:ff:2a:f6:ca:92:
         c2:f2:66:97:73:65:2e:76:80:a2:02:29:4c:79:59:15:e2:be:
         b9:05:71:9f:91:55:03:bd:56:b9:67:73:3d:1a:b8:eb:16:54:
         5a:57:c0:cc:8c:04:45:ec:3a:be:4f:db:30:98:00:e3:bd:3d:
         7a:22:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:39 2025 by rpki-client