Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
File:                     1626650d-bc51-3b45-ae3f-8d59976db3ea.roa (raw, json)
Hash identifier:          w09tBCLm5HRaepR3TU2MWhAYG1wR93z73V9ffHEgY98=
Subject key identifier:   9C:D6:B9:10:0F:E8:73:98:AD:EC:06:BF:AB:AC:0B:17:51:C8:36:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A173010FE992FF92807524B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     6939
IP address blocks:        2600:7000::/24 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:10:fe:99:2f:f9:28:07:52:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=e8d5b915-4038-4723-8f0a-098b05192ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:cc:f1:fd:ad:6d:56:68:2c:e8:ad:1f:73:
                    e3:ed:e3:d7:d6:72:a7:ec:b0:78:a1:b4:0b:d9:0c:
                    9c:58:ba:9f:7e:af:0b:9d:be:33:30:21:a3:45:bd:
                    88:34:05:1f:1e:c6:3c:80:84:a3:f8:cd:6b:f8:25:
                    dd:f4:6f:33:46:9a:00:91:44:f6:08:58:61:d6:69:
                    a4:68:16:76:3b:ed:53:b6:be:3d:7f:e2:a4:8a:6a:
                    02:cb:5f:15:a7:76:3c:a4:7d:9c:89:b6:1f:2e:c0:
                    dc:39:ef:e5:03:ee:c4:ef:c9:d9:4f:c5:65:2a:a2:
                    05:57:de:6a:4a:80:14:9f:cd:31:e6:dd:47:8e:c7:
                    db:f1:af:9f:53:63:2c:2b:6a:21:5a:da:7b:55:35:
                    2b:5e:8f:d0:55:07:76:e8:93:05:c2:74:b7:c6:d3:
                    16:21:34:08:47:77:2c:c0:3b:39:6d:76:b2:c0:b7:
                    0d:62:95:39:99:d1:a3:a9:9e:27:03:90:b8:69:2e:
                    55:94:70:2d:e6:d4:e4:d5:69:dc:2b:51:73:7c:c6:
                    bc:96:dd:7f:3a:56:04:53:39:f2:af:8d:6e:70:b7:
                    9c:9f:63:93:57:91:c5:a0:53:ff:af:56:bb:b0:8f:
                    f4:22:60:1d:fa:08:2f:d1:4d:6d:d7:22:d2:1d:c6:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:B9:10:0F:E8:73:98:AD:EC:06:BF:AB:AC:0B:17:51:C8:36:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8b:db:28:c3:86:e6:ff:7a:ea:38:c8:6e:f1:98:9a:17:07:
         a1:66:cb:85:d8:e8:d0:3e:42:91:27:37:52:a1:59:af:b5:ba:
         ee:94:a4:37:8b:0c:9b:4f:7e:d3:68:00:24:1b:41:f7:05:c6:
         2b:d9:e3:64:27:a8:26:d0:48:83:ca:c2:fc:ba:48:95:f2:0b:
         25:39:af:10:2f:1e:16:be:27:ac:e1:d9:fd:0c:60:59:8a:08:
         b1:a1:ec:24:12:0d:51:36:e2:ad:a6:fc:69:65:3c:0c:ce:dd:
         29:fa:e2:13:e0:07:ad:48:d9:b8:4a:37:38:b4:68:c9:91:5e:
         e4:61:3a:cf:8d:36:11:34:23:9f:1e:e7:61:69:37:63:2d:46:
         fd:f7:d1:75:56:6f:18:1b:a2:28:09:cb:a9:61:cd:cf:20:f9:
         18:a5:82:6d:63:db:4f:66:be:fb:af:e4:bc:17:b5:85:ba:c5:
         6f:65:ad:8b:c9:64:0b:81:04:f2:f2:a2:55:67:19:03:20:40:
         e0:7b:ac:5d:2f:da:ba:59:36:e2:2b:a6:79:d4:75:f3:ab:e6:
         d6:27:ec:b8:ff:54:4d:77:7d:c0:62:1e:9c:0a:cb:08:6f:fb:
         9a:f8:bb:de:62:e8:ad:dc:f7:74:3e:e2:52:f8:0f:21:15:fb:
         dc:1d:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:09 2025 by rpki-client