Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa
File:                     506513f9-2c86-3a5e-a9df-eba8bab7324e.roa (raw, json)
Hash identifier:          hb4TMQBxqbBKEtRKir81w6tfCIFxffv1Pwps9hTqH0I=
Subject key identifier:   F2:28:1A:6B:ED:96:A7:47:61:68:D4:FC:EB:37:3E:0C:BC:E8:5E:AE
Certificate issuer:       /CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
Certificate serial:       010D0C9F4328584A1465640E00F0EB89F78B5EF0
Authority key identifier: 0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     400659
IP address blocks:        2620:aa:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:64:0e:00:f0:eb:89:f7:8b:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=955fdc51-1429-41f1-ab9b-194ad0d95f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:3f:83:4a:44:ff:f8:fa:22:b6:2d:52:f7:
                    d4:e2:ab:95:27:66:5e:b5:a9:59:b0:ca:77:b9:cd:
                    ef:96:49:af:11:34:3a:90:4b:e2:7f:f5:35:ba:68:
                    2c:d2:53:85:5b:03:69:63:9f:af:34:f2:23:0a:2e:
                    1f:e7:16:39:b2:bf:69:61:62:ba:30:b5:d9:91:18:
                    06:ac:46:48:ff:ba:a0:0e:b6:5f:6b:4f:03:d8:d9:
                    98:93:5e:a8:e2:72:1a:4c:0c:db:ae:3c:f7:46:85:
                    c6:a6:30:bd:38:f9:d7:e6:8b:f9:07:da:59:55:0a:
                    93:35:42:00:15:4a:85:82:68:18:62:8a:2c:9b:ca:
                    1e:10:bf:38:24:7b:fc:0f:25:65:2a:ec:f3:de:8f:
                    8d:a4:71:7a:21:d5:18:b3:e0:48:79:75:c3:96:84:
                    82:1c:3b:ef:bc:2f:1e:85:12:67:e6:b6:54:b7:75:
                    f3:ac:ef:38:72:29:58:ba:14:d6:4c:47:57:f3:aa:
                    18:7f:3e:44:de:2f:01:c0:ce:4b:de:41:03:67:3a:
                    bb:3a:84:a7:4e:3c:4f:7f:3f:aa:61:70:a1:74:ee:
                    1e:cd:e2:16:a5:5a:7e:7f:98:7e:48:ae:27:7b:f9:
                    d2:f2:03:02:8e:92:e7:a6:db:61:fe:1a:83:13:ad:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:28:1A:6B:ED:96:A7:47:61:68:D4:FC:EB:37:3E:0C:BC:E8:5E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/506513f9-2c86-3a5e-a9df-eba8bab7324e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl

            X509v3 Authority Key Identifier:
                keyid:0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:19:d6:b7:4d:1d:1d:c9:19:71:38:5a:1a:17:d2:49:88:
         7d:dd:11:e8:a6:b9:1a:6a:45:aa:3c:c0:e2:a0:df:19:c0:ad:
         25:a2:d3:7c:38:92:0a:02:85:ef:8f:bb:70:e2:76:55:24:10:
         cc:5a:b0:18:7b:76:8a:21:a9:57:53:86:92:b3:65:ec:84:cc:
         46:b2:95:d6:05:f3:6b:3c:cc:e5:16:fe:a5:1c:9a:51:4e:d3:
         0a:c4:bf:26:d1:b8:f1:e6:3f:40:bd:60:13:58:c9:64:76:d0:
         9c:89:bb:6c:d1:94:9b:9a:ad:94:e4:63:90:e3:8d:ed:78:af:
         bf:71:68:67:a9:44:81:3a:fd:5f:d1:3e:36:f6:1c:b9:d6:80:
         60:ab:34:f4:84:71:10:59:ca:b1:f5:6f:84:d7:ba:9f:d0:4b:
         fd:67:3e:28:38:71:d7:d6:03:65:0e:44:d4:b9:3a:1b:d2:4c:
         36:6a:30:b8:dc:a0:35:7c:57:2d:cd:aa:2e:74:f8:f0:af:c7:
         1d:69:4f:53:93:a2:af:f3:ca:98:f0:30:7e:ea:d1:97:92:40:
         2a:aa:93:21:4c:0a:53:90:30:78:cf:fa:f7:2e:e2:24:9f:e9:
         f7:ce:ff:d2:d8:50:5b:c2:f0:85:29:ac:e0:09:00:8f:f2:45:
         71:d4:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:42:32 2025 by rpki-client