Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0874d433-ac4d-3ed0-83dd-7803dbc6c3b0.roa
File:                     0874d433-ac4d-3ed0-83dd-7803dbc6c3b0.roa (raw, json)
Hash identifier:          6pYr40xiWB/Vu08axG6x16A4Bhat8dWfdi6/RtI6/GA=
Subject key identifier:   A8:FB:5D:38:B6:B7:6F:B0:8A:7F:F1:03:BD:CD:75:53:90:98:C5:E8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285849D6FA4245FE936A964A0D6E00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0874d433-ac4d-3ed0-83dd-7803dbc6c3b0.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     215224
IP address blocks:        2606:f180:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:42:45:fe:93:6a:96:4a:0d:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=511fcdff-1af8-4074-a47d-1ffe84333b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:8f:52:9a:13:2d:f8:64:5c:36:31:a8:5d:
                    57:98:a6:e4:13:87:e5:57:7e:5f:00:40:5b:3e:99:
                    7d:17:25:bc:83:3a:f5:21:93:45:20:46:14:da:5c:
                    1a:5b:ca:be:64:6c:40:28:0f:8f:f4:4a:51:9a:f4:
                    91:ba:a4:ec:d6:37:e6:ec:fa:d1:0a:9e:68:aa:a9:
                    ff:63:fc:b0:23:8c:47:92:5c:db:70:3a:bd:cb:60:
                    22:cd:2b:9b:5c:65:be:d7:57:5f:30:f6:45:dd:7e:
                    05:89:d1:1f:29:b0:55:8a:27:fa:e6:e8:74:cf:50:
                    29:8b:95:fe:70:fa:d2:c1:c4:c0:71:df:ca:b4:22:
                    3e:87:00:3f:cc:c4:a5:e2:d8:e8:6f:13:98:ce:45:
                    f7:31:6b:34:25:17:87:fd:fa:9b:fa:1b:b8:de:b2:
                    94:ef:5a:b0:91:53:55:1d:8b:23:31:d8:38:96:7e:
                    1e:df:5b:44:35:eb:9e:14:b1:49:02:e9:b1:47:39:
                    69:23:1c:22:0e:91:b0:d1:7a:53:41:44:1e:75:7b:
                    79:cf:ec:2a:df:45:bf:47:43:50:02:05:d6:99:e7:
                    d2:9e:04:78:7f:fa:06:3d:a2:dc:34:f7:ae:be:52:
                    04:cb:5d:f8:84:fe:af:6d:f1:a4:4f:c6:ed:8f:82:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:5D:38:B6:B7:6F:B0:8A:7F:F1:03:BD:CD:75:53:90:98:C5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0874d433-ac4d-3ed0-83dd-7803dbc6c3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:88:5d:da:97:d2:5c:d8:cf:a1:39:eb:4a:c3:df:7f:86:bd:
         86:bb:ec:ce:3c:d4:68:8a:e8:49:96:83:cc:19:0f:0c:ed:52:
         61:fc:aa:09:fb:26:e8:7c:c6:86:83:45:f2:44:b3:dd:ca:c8:
         ad:5a:02:10:8d:99:9a:58:6d:9f:73:cd:80:f7:f1:5e:71:c8:
         fa:78:da:21:c7:ba:8c:09:86:2b:99:47:e8:eb:91:02:53:34:
         c6:24:99:b8:db:81:ad:19:40:8d:5a:27:ae:c0:85:6b:a8:44:
         08:9d:7e:88:49:6b:a4:60:81:ab:6c:c0:fa:dd:28:ee:8b:fc:
         73:42:3f:d2:ae:67:99:48:27:6b:50:e6:3b:f1:32:31:a6:f1:
         b2:da:5e:dc:4d:d0:2c:87:02:2b:60:d4:08:e1:b0:d9:0e:07:
         5b:94:2b:01:f3:87:bc:24:fa:2f:08:2f:28:7a:ec:1f:2f:dc:
         75:89:b8:23:81:03:2a:b6:ef:b3:f1:e3:6d:38:3c:c2:3a:0f:
         f1:74:7c:30:90:92:d0:4d:6b:a2:1b:33:85:79:81:5c:de:b5:
         6e:df:5c:10:f4:dc:29:09:6a:0f:d0:4d:f6:30:d8:49:75:51:
         11:34:20:33:81:a1:e8:06:90:c0:bf:33:fe:66:04:b2:58:8e:
         11:ff:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:56:14 2025 by rpki-client