Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/76fe7503-2758-3500-91da-f201b6d86c6c.roa
File:                     76fe7503-2758-3500-91da-f201b6d86c6c.roa (raw, json)
Hash identifier:          d1bEKRM6WWb+CVjyhpeoEGuMF+gPOiMNowcWkSJgq9E=
Subject key identifier:   E0:71:B7:29:57:D5:F9:0E:43:93:8D:E8:81:34:1B:6C:02:1A:A7:44
Certificate issuer:       /CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Certificate serial:       010D0C9F4328584A46A5A86DB8CE30A2534B11A0
Authority key identifier: 74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/76fe7503-2758-3500-91da-f201b6d86c6c.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     46154
IP address blocks:        2606:dc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a8:6d:b8:ce:30:a2:53:4b:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=20fc991b-fc48-4e3b-be66-3374d9a6d935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:e4:e2:69:09:f1:12:54:c7:36:bb:8c:84:
                    ae:a1:da:a9:5b:d1:38:c5:a7:8b:f4:66:c0:f9:30:
                    06:ca:b4:b5:79:7a:94:94:2a:2a:92:36:ac:0b:e1:
                    bb:0c:4e:80:31:91:d1:a1:a9:89:5b:16:04:3a:25:
                    59:87:d1:cd:71:e9:d7:02:04:6a:cc:c7:32:54:25:
                    d0:04:d4:4d:08:d1:fa:ea:3e:5d:de:26:40:1b:1e:
                    fc:37:8e:99:85:30:c6:3e:d3:15:7a:6e:d7:83:c1:
                    14:da:12:40:17:18:93:3b:4d:a8:d4:a1:2f:de:8f:
                    e3:b0:7e:c2:23:33:f1:7c:8f:86:8b:8f:67:94:81:
                    8c:09:93:10:cc:52:39:3d:a6:fe:84:34:33:5c:40:
                    1e:48:ab:44:ab:23:2a:a6:02:c7:b9:bb:fc:77:be:
                    39:fb:a1:87:03:00:be:58:9e:21:a4:90:59:ec:07:
                    7e:f4:9b:ce:1a:99:c0:85:67:ea:9b:9e:d3:d7:07:
                    96:52:45:2d:61:32:e0:2f:9e:30:4a:8f:28:0a:dd:
                    a0:bb:2e:8a:43:b5:61:25:c1:34:4b:b3:09:b4:3f:
                    88:b2:b4:64:52:40:55:54:22:fa:42:d2:f5:65:39:
                    9a:01:a5:90:aa:4f:46:3c:d7:40:38:ab:70:69:27:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:B7:29:57:D5:F9:0E:43:93:8D:E8:81:34:1B:6C:02:1A:A7:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/76fe7503-2758-3500-91da-f201b6d86c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl

            X509v3 Authority Key Identifier:
                keyid:74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:a5:20:3b:ce:cd:b4:73:1e:78:4b:ad:2c:07:25:64:9a:
         fe:42:f4:63:fb:6c:13:7e:c0:a1:e2:d6:7e:a6:30:b8:aa:3f:
         03:11:4c:27:b7:75:cd:b7:b2:17:9d:d7:7b:02:6c:67:34:e0:
         32:18:53:ac:8e:bf:5b:1a:3a:eb:39:b9:88:a3:22:51:10:f6:
         73:60:17:35:45:48:4d:2b:e9:a2:b3:1d:1a:72:a0:2c:c4:fc:
         d1:f4:f4:35:e2:3b:4b:a1:d3:0a:8a:23:c8:e6:d6:c3:9c:bc:
         00:67:ab:b1:74:69:c1:98:af:8e:16:27:1e:6d:cf:53:bf:44:
         d3:c8:57:cd:66:61:64:9e:20:61:ca:c4:3f:cd:61:c6:5c:29:
         87:94:59:50:25:36:c4:23:0d:58:ab:b1:ed:a4:39:f2:fe:fc:
         9e:aa:1c:b8:98:7a:5d:ee:a9:90:f6:4f:59:98:68:81:e4:e0:
         42:ec:d0:1a:df:f2:ad:67:05:45:c7:12:c2:51:f7:0a:46:fd:
         2b:0f:83:a1:54:ac:93:6d:42:fa:8d:6d:31:97:36:3b:b6:80:
         24:22:a3:32:33:b0:2a:bf:a2:0e:35:30:10:98:f2:c4:60:1f:
         89:f7:a3:b5:1d:0d:57:d9:07:02:6b:91:81:50:a4:b9:63:d2:
         c2:ad:fc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:34:33 2025 by rpki-client