Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa
File:                     7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa (raw, json)
Hash identifier:          x+xGul4QEmGDcwCoHUmJ0IMweU5JvHFmMjG73FtTaDQ=
Subject key identifier:   3F:E4:77:95:06:9F:3E:3A:35:64:9B:D6:7B:75:D8:E9:88:E1:A4:4C
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285849C0A4D5E88BF6AEC16417E600
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     394497
IP address blocks:        2606:8e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d5:e8:8b:f6:ae:c1:64:17:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=1acf9efc-d993-4cf6-a315-08b5f0b12674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:30:cc:fe:3f:8f:fd:e8:8f:8f:00:71:59:
                    26:9f:66:ec:80:d5:12:2f:27:37:c9:9c:e7:d8:27:
                    03:e1:76:62:eb:c7:29:ea:d4:0c:67:3e:46:d2:f6:
                    e5:8b:f7:61:3f:64:03:b1:3d:6a:f9:9b:ce:eb:93:
                    a7:0c:f5:5c:9b:1d:b6:e2:6c:33:9d:aa:e7:67:19:
                    d8:39:83:f3:46:82:90:d2:ea:ca:e4:1e:02:13:b6:
                    d5:74:5d:cc:4e:98:aa:88:2f:2a:a4:b0:08:b0:95:
                    2f:0c:e2:39:49:5b:71:e0:90:9c:fb:86:f6:29:f3:
                    45:49:ec:63:c3:de:9f:5d:09:ab:4d:bc:f2:97:1f:
                    d4:44:fc:97:f3:84:f8:d0:48:d0:90:3d:9a:d6:09:
                    20:33:16:de:20:c8:d0:bc:8b:29:1b:28:20:9e:f0:
                    9d:71:e1:07:f1:97:e9:b1:d0:bd:98:6a:3e:c7:5f:
                    ba:54:3e:0a:a7:60:6d:f3:97:10:e8:86:ce:45:4c:
                    be:5b:60:0d:da:7f:17:08:8e:d4:52:fb:71:f5:23:
                    b8:92:47:3a:70:e1:ba:d9:5a:97:70:ce:1f:9a:94:
                    63:06:32:99:d6:5f:fc:ce:bf:a1:03:66:42:7c:19:
                    50:fb:a0:90:8d:9b:4b:bc:e0:bf:15:00:23:98:04:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:77:95:06:9F:3E:3A:35:64:9B:D6:7B:75:D8:E9:88:E1:A4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/7b754d3b-c87f-3f78-b563-f8ea0b8b228a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:69:56:73:ac:93:89:bd:c2:b5:d2:f6:d4:ce:78:8f:8e:
         2c:33:53:19:9b:81:0c:7b:10:a7:54:0d:9c:f4:a0:4e:4a:89:
         36:22:dc:68:08:46:28:44:a1:e1:e7:20:85:2f:23:46:b6:fb:
         07:06:00:59:58:eb:ad:8e:77:fc:c9:31:0c:60:93:f3:a3:0a:
         e3:09:c6:c8:50:d2:18:5c:c8:cc:ad:fc:e8:f6:38:ec:4b:d8:
         b8:9d:22:8f:98:c1:05:d9:bb:9d:b2:97:21:99:1f:4b:2a:3c:
         40:8a:af:95:72:a7:cc:f6:71:e7:ab:d7:e9:e4:d4:d4:57:9d:
         7d:cc:15:d2:2d:40:e3:49:41:9a:7f:0f:83:54:a1:6a:ba:00:
         4b:5c:c9:29:36:54:23:2e:53:7c:0c:22:53:47:9d:9b:64:3a:
         b1:ba:9f:4a:77:85:b6:69:ad:ea:bf:9b:c0:2d:92:bf:99:a4:
         6b:31:11:12:9a:4b:3b:b7:de:05:5f:be:1d:56:63:a3:5d:c7:
         3e:0c:aa:19:7f:3e:2a:e7:4c:9e:a6:b8:b0:b9:15:2a:0b:98:
         b0:14:0b:3d:07:68:a3:c0:81:1c:54:95:52:9a:ea:f2:b5:9c:
         5a:6a:50:49:3a:a0:9a:08:8d:79:84:50:ce:8e:c5:43:4e:b2:
         6f:51:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:27:30 2025 by rpki-client