Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
File:                     2a070509-9ba8-3201-ae15-b6c4334f1efb.roa (raw, json)
Hash identifier:          TCySIEB/0elf1I3zwiTJHKG1cMvjhKbtHZ96dLzELyo=
Subject key identifier:   8F:46:AE:BA:0E:1A:9A:5B:25:C7:2D:69:83:85:4E:CF:58:E0:5B:36
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285849C20A09D69E04CBEA2026FBC0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     1403
IP address blocks:        2606:6d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:09:d6:9e:04:cb:ea:20:26:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=cfb7170b-70dc-45dd-b785-22b96265c809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:23:4c:18:58:90:97:27:99:33:ce:16:02:
                    b6:1e:60:17:4f:a8:02:4c:2a:52:25:54:56:3d:b6:
                    05:55:f3:f1:52:46:0b:44:1f:66:b5:e1:57:ff:29:
                    c6:a9:a6:8f:93:9e:5d:0c:a4:43:39:78:81:84:6f:
                    6d:3e:9a:30:7f:03:f6:31:7f:6d:dd:be:4b:22:2d:
                    a0:cc:98:3f:9a:16:f8:2e:dd:be:3d:26:40:27:e6:
                    5f:bb:04:38:a8:96:78:eb:31:80:05:7c:36:5f:03:
                    e6:c0:8b:34:63:c8:4a:ce:d9:59:e3:c1:0b:45:80:
                    62:49:58:cf:35:e6:f0:f4:9a:df:79:53:39:b5:ef:
                    9c:03:ca:ac:30:94:25:4a:7a:1a:a7:97:40:6c:c7:
                    4c:57:33:91:c0:cd:69:f4:b1:8e:f1:ba:43:21:2c:
                    41:ad:2d:19:a4:03:83:7e:09:1b:aa:2f:4e:91:84:
                    83:f3:dc:32:d0:f0:9c:74:f8:f2:da:89:ca:81:60:
                    5a:b0:a3:4f:31:57:0a:3f:f0:d6:19:fc:33:9a:b7:
                    d7:35:f7:1d:e2:9d:26:bc:2b:1c:66:5a:cd:1c:d2:
                    e2:ee:7a:59:cc:62:ab:9a:66:bc:6d:af:de:e1:2d:
                    c3:dd:84:df:6e:7d:63:7e:26:b5:15:8d:55:9b:bd:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:AE:BA:0E:1A:9A:5B:25:C7:2D:69:83:85:4E:CF:58:E0:5B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/2a070509-9ba8-3201-ae15-b6c4334f1efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:4f:68:80:aa:d4:0f:97:44:37:5e:46:ad:ba:a8:21:c7:
         68:f7:4e:94:62:51:72:03:cf:5f:93:bc:50:d5:e1:57:05:39:
         ac:cc:cb:fb:6e:b5:9b:d9:53:50:4e:03:84:c6:48:2c:f9:12:
         0a:fa:f5:bd:5a:1a:6a:d9:fc:b9:39:b0:be:b1:c3:b3:89:cc:
         ec:a7:83:21:c1:ee:7d:e5:52:f9:50:81:7c:8d:0b:4d:6c:88:
         d6:e2:ef:03:60:b8:9e:01:f9:09:78:e7:61:e6:6b:04:04:c1:
         1b:4d:1f:ce:ba:7b:15:59:dd:16:e9:ca:2a:10:a1:3f:99:20:
         d7:00:d7:eb:6c:72:cc:c3:03:b1:28:66:f4:e8:74:8d:c3:90:
         dd:38:90:f6:f1:5c:65:c3:b5:b0:c9:82:af:a1:03:f9:ec:cf:
         f0:df:c8:98:23:22:42:eb:00:e2:12:ec:ff:fd:1d:f1:a5:34:
         c3:02:f9:a2:84:79:c1:2c:5d:a8:f2:9e:aa:77:a9:44:4f:4a:
         55:ed:58:5c:7a:16:c3:e3:f7:cd:de:5c:c4:b7:1e:8c:34:08:
         c4:e4:df:65:8c:9b:ed:6f:ae:88:4d:85:a5:bb:e2:2a:3e:5d:
         60:31:d8:9f:a1:fb:3d:1a:f8:8a:3d:aa:53:e5:39:2a:ad:f8:
         5f:9a:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:11 2025 by rpki-client