Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa
File:                     901a0472-6710-3856-abd4-2432486d0fa3.roa (raw, json)
Hash identifier:          eCaNlAayt4RM2XHj0BvoeQ6GgkDst5/60zSLGVw/WMY=
Subject key identifier:   20:ED:7C:BD:73:99:91:90:96:84:65:4B:AF:E8:CE:B2:92:23:79:7B
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285849DA7717AD388DFBB279B68880
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa
Signing time:             Wed 14 May 2025 19:00:00 +0000
ROA not before:           Wed 14 May 2025 19:00:00 +0000
ROA not after:            Tue 12 Aug 2025 19:00:00 +0000
asID:                     14618
IP address blocks:        2605:b040:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:da:77:17:ad:38:8d:fb:b2:79:b6:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: May 14 19:00:00 2025 GMT
            Not After : Aug 12 19:00:00 2025 GMT
        Subject: CN=44d8f058-a346-48c8-af80-01572cc72010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:81:8f:e1:b4:18:14:fe:f2:37:6a:57:e1:
                    60:36:bc:e3:a9:e3:cf:e4:05:28:ab:de:27:8e:f3:
                    50:d0:e4:d1:19:99:d5:0f:f2:ea:fb:1a:9f:10:89:
                    71:b5:ce:bf:cd:44:0f:1c:7b:a9:66:f5:a1:1e:02:
                    5a:13:df:8d:db:39:de:39:13:03:83:b9:5a:cd:36:
                    b7:34:4e:50:61:77:c6:a1:c6:54:15:86:52:85:0b:
                    1d:08:ca:8f:03:da:e6:57:09:41:7d:89:33:87:5e:
                    ca:3e:1c:02:99:da:5f:9a:e4:ac:62:a2:62:11:9c:
                    78:4f:7b:53:d3:70:52:e4:b7:0a:a5:7a:a7:36:67:
                    21:1c:f8:be:8d:ff:bf:4a:39:c2:3d:cd:86:d3:d4:
                    00:09:8d:17:12:be:0b:a5:8d:30:68:5f:53:cf:d1:
                    b2:70:b2:bc:d9:25:7c:d3:ac:4a:19:c1:b3:58:1a:
                    3e:7c:bf:2b:78:b0:af:6c:cf:51:42:44:f7:52:ca:
                    d8:2b:04:46:82:c6:34:ab:7c:e4:38:2f:4b:eb:e2:
                    79:94:5e:8c:bc:ef:b7:c1:91:70:82:a8:bd:42:e4:
                    0c:8f:a7:14:40:13:98:7e:21:f3:99:2e:5f:53:72:
                    68:ea:c7:9f:e4:ad:4a:cb:76:43:f3:02:49:f9:a1:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:7C:BD:73:99:91:90:96:84:65:4B:AF:E8:CE:B2:92:23:79:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:34:3d:d6:60:ef:c0:09:0e:36:97:a4:1a:e4:c0:3c:54:ca:
         b4:43:47:e9:0b:5f:9d:3f:82:cc:44:f2:ed:eb:2e:8c:47:4c:
         e1:63:71:84:13:a9:6c:c3:ef:97:4a:7e:58:5d:7e:54:db:6a:
         20:00:18:47:3c:95:e5:ea:80:57:ad:c7:06:60:d4:e6:05:34:
         5e:a1:b9:b9:31:6c:7f:58:c0:b2:9b:75:26:93:d3:3d:1d:65:
         65:c7:0b:a7:65:d7:dd:c5:c7:b7:8f:1a:c2:61:60:08:57:22:
         1e:5c:79:b6:3c:88:ce:4d:da:49:61:69:13:f7:2f:4a:10:d3:
         df:9f:03:a5:6e:56:c7:1e:ac:f1:a8:1e:d9:f5:77:6b:79:0c:
         1e:d2:ef:b1:20:77:ea:ef:4e:8c:89:42:b1:f5:50:5a:7f:0f:
         03:84:ac:25:aa:8f:47:85:5e:ce:65:c5:d3:c3:04:63:08:2f:
         92:d6:45:93:b4:2a:a1:00:52:e3:83:77:42:e2:69:2b:a2:0a:
         be:71:d8:77:f3:87:61:4c:7f:ad:f7:5e:5b:f5:fe:25:e6:e7:
         af:2d:16:23:f5:17:4c:d4:8f:58:8c:e9:91:05:83:04:b9:0c:
         31:b3:dd:06:a4:0e:04:81:eb:ab:86:84:1b:15:15:cc:b8:00:
         c0:ba:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:16:57 2025 by rpki-client