Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
File:                     d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa (raw, json)
Hash identifier:          hbiSI5NHBaNcc3VO0VSmn9zBPNL9qPJ8E3Nk1wV/IZc=
Subject key identifier:   5F:9A:4B:EB:99:43:5F:9B:60:FF:D5:87:90:1D:1D:79:89:B2:E0:A5
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584A43DAFFD252EC730B30B05B00
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     397016
IP address blocks:        2606:aa40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:d2:52:ec:73:0b:30:b0:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=a759e2d2-50ee-4423-b11a-b232360a305a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:cc:fb:0a:83:44:8c:ee:9b:99:ce:29:9d:
                    cf:c1:4b:d5:53:fa:5a:81:ac:4c:4d:78:d8:a2:a1:
                    8b:77:6c:f9:dc:a1:ec:bd:c1:f7:e2:ce:66:ad:10:
                    2a:3d:f8:0b:b8:66:c9:bd:db:cf:b5:bc:0b:d8:88:
                    23:e3:27:66:ee:77:c9:ff:6b:27:e1:39:3f:32:1c:
                    44:9c:94:28:8b:32:bd:5c:53:29:62:c1:54:10:7c:
                    9d:8c:6f:8c:64:88:7a:4f:92:8e:95:d0:94:18:88:
                    9b:22:dd:f1:0a:8b:90:6a:13:da:0a:47:93:d7:73:
                    40:ee:c6:cf:14:99:3e:67:40:94:3f:98:75:fb:3f:
                    6f:c4:a5:68:d0:fb:17:3b:91:5f:e3:76:b8:aa:48:
                    7e:17:2a:5a:65:f4:cb:69:22:36:82:de:71:d7:dc:
                    16:94:57:a7:b3:19:cf:cc:1c:37:d5:f8:78:7b:24:
                    0d:7b:3d:37:c8:46:05:93:d2:5c:d5:fc:97:cb:c6:
                    97:44:4d:95:32:13:e8:0a:5e:5c:c3:31:d8:48:8c:
                    91:e2:5f:27:99:be:58:07:5d:e9:c2:ec:4f:84:8c:
                    75:8a:84:9b:e9:7e:b5:06:87:bc:47:7a:4b:be:0b:
                    10:0f:3c:8a:85:41:1b:d1:dc:05:fa:77:67:48:ab:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:4B:EB:99:43:5F:9B:60:FF:D5:87:90:1D:1D:79:89:B2:E0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:14:01:d7:79:9d:08:d5:31:e1:83:fe:d1:84:7d:31:4a:
         b2:fa:5a:fd:ae:2a:2d:b3:0b:e9:ca:ed:70:c0:90:36:bf:87:
         b6:6f:5f:80:b7:b1:e9:f5:36:26:a4:f7:bf:a7:73:f1:54:7d:
         3e:2e:5e:b4:a0:4c:de:19:89:ba:3d:fc:3f:be:47:fd:33:c3:
         e3:e4:39:59:ea:af:01:cf:9c:28:fe:b1:f8:16:1d:2d:ee:97:
         5e:5e:96:16:30:48:51:a8:8e:97:da:30:8a:2f:87:28:ef:ef:
         fb:98:f9:62:6d:28:b2:cc:d9:43:6a:c8:ac:31:7d:6c:3a:43:
         88:dd:aa:0e:0d:3b:45:fc:2c:ad:4f:19:96:04:f8:77:d8:26:
         1a:b5:b0:22:38:95:27:60:e9:42:f2:70:96:b1:97:e5:00:ef:
         73:6d:43:26:4c:ed:4f:5a:1a:00:1c:c9:ad:44:86:38:1d:04:
         10:10:c5:2d:4e:e4:38:11:48:7f:f7:fc:ea:8b:ca:8e:34:d7:
         d4:4c:36:0b:83:6a:77:0d:3f:1d:26:87:f8:d2:ce:f6:5c:7a:
         56:7c:10:0e:22:1f:ab:7b:c9:ec:5b:cb:b9:a8:61:4b:a1:43:
         5e:3c:40:c5:65:3b:f6:16:33:6f:09:eb:a1:37:fd:1c:62:87:
         ed:2c:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:40:03 2025 by rpki-client