Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
File:                     467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa (raw, json)
Hash identifier:          QRNSYrDahkWpSmGbuRz7odGx4098Z6bRptO4xedJgms=
Subject key identifier:   07:04:F4:1C:6A:54:62:5C:37:7F:D9:E6:FA:81:34:31:66:41:A4:AD
Certificate issuer:       /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial:       010D0C9F4328584A49706928C40EAE76255E5980
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     26661
IP address blocks:        2620:12b:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:69:28:c4:0e:ae:76:25:5e:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=8feda68a-6cea-44c5-acdc-dbf5a23e2006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:62:8d:ea:67:3c:05:7e:30:af:ed:a1:3c:
                    45:b0:74:fb:3f:07:9e:88:c0:a0:ea:0a:d3:af:74:
                    80:51:45:a1:4d:95:bc:30:bd:da:e2:ac:1b:c4:20:
                    65:45:86:da:f6:3f:fd:55:7c:b5:22:5a:ba:8e:33:
                    e9:f4:a2:0e:91:fa:78:a8:06:13:67:19:9f:b1:6f:
                    a5:d6:b9:77:3a:ea:40:f5:58:d9:6e:54:c8:d2:75:
                    a9:46:23:41:d8:23:99:be:07:fd:2f:e1:17:07:36:
                    68:df:5f:05:25:04:e6:92:55:73:f4:1d:0d:63:e8:
                    2e:b7:0a:82:51:f0:48:be:28:6f:d8:07:cb:ce:34:
                    45:b3:5a:8b:51:fc:b9:3e:59:94:33:e8:d6:e2:6a:
                    63:47:fe:9d:75:71:8b:ca:1f:68:bc:b4:1d:9c:bf:
                    88:e3:e1:d2:06:74:38:ee:50:9c:47:c2:e1:f2:8f:
                    7a:2e:a7:e1:b2:47:3e:e8:61:21:ab:45:08:d0:33:
                    8b:3d:01:ae:53:ae:5e:cf:f4:53:e9:86:2d:00:e0:
                    f6:34:14:8d:b5:eb:4a:50:a0:00:f2:f9:2e:0d:8b:
                    fa:18:89:a8:5c:ae:fd:df:e0:f0:1a:34:c2:fb:e0:
                    e9:90:e8:0d:c8:d1:d5:27:bb:07:ea:59:42:ca:bb:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:F4:1C:6A:54:62:5C:37:7F:D9:E6:FA:81:34:31:66:41:A4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:3b:3a:ed:a2:2e:8a:03:41:86:56:91:6c:6e:4a:2c:94:
         37:ca:be:0a:9c:8f:92:c1:0c:84:67:b9:73:4a:d5:8b:df:ab:
         c2:62:c7:06:92:a2:b6:ff:82:22:59:50:1a:9b:fe:ee:fe:a8:
         16:cf:c7:1d:69:db:ab:e7:f3:35:a2:87:92:d7:fd:22:14:54:
         cf:1c:a6:a2:ab:e8:8e:31:b7:89:c2:d0:53:83:e3:6a:b6:fd:
         49:97:95:f9:a6:e6:11:2a:97:9e:49:61:be:2e:c0:c5:27:4e:
         19:2a:b9:3f:a4:2a:9c:fc:94:72:7c:bd:c8:2a:5d:e8:45:cd:
         90:89:e0:6f:50:c3:02:15:cb:b4:28:da:d5:db:93:c4:0e:8f:
         3f:33:80:1f:2e:20:06:5a:ce:db:66:8f:32:f5:04:84:0c:f2:
         76:94:49:21:c3:e8:9d:8c:25:b4:f9:a5:47:5f:28:c5:8f:a8:
         09:6a:77:00:3b:82:ad:c4:8b:97:4d:1c:51:e9:1d:25:35:a4:
         da:37:05:83:df:be:96:6c:35:fe:81:41:24:33:29:74:97:2b:
         8a:39:ee:4b:25:0e:7b:4e:43:e1:2e:4b:78:e7:0b:61:85:d6:
         ef:a5:be:dc:6e:90:36:e8:fe:6f:cb:ec:f1:3c:3f:94:85:97:
         ed:fd:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:14:46 2025 by rpki-client