Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa
File:                     63a2688f-9916-362f-afd7-09bfbd816217.roa (raw, json)
Hash identifier:          mb14BrMAS6LmEmpBtc4cECAEHMS9caci1/r/t+nboDE=
Subject key identifier:   AB:8B:59:AF:93:C7:B2:43:D0:D3:8C:92:52:1E:31:66:70:85:CB:C1
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584A331AE551A27D9A065FFFA280
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     62654
IP address blocks:        2606:3dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e5:51:a2:7d:9a:06:5f:ff:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=6d8328ad-6ec3-4fe1-915d-289949fae16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:95:37:ed:4b:3a:7b:11:53:c9:65:a7:eb:
                    0f:d9:f3:c8:87:02:d4:25:8b:06:9f:bb:cd:ae:5d:
                    7d:35:9e:02:87:37:5d:40:f2:b6:aa:53:38:91:d7:
                    c0:0d:8c:c9:28:65:08:18:15:6c:1e:f9:b8:f7:93:
                    45:e0:01:06:3b:6c:3b:bf:49:d5:f4:00:7a:28:19:
                    3f:f2:08:2c:2b:32:65:31:f1:93:ed:3d:2c:f9:60:
                    07:f4:f9:5a:6a:f1:23:6e:d3:49:c4:27:54:bc:19:
                    5b:5d:87:c7:8f:3b:cd:0d:f5:18:51:bf:d1:33:da:
                    d6:f9:75:6b:a4:23:96:d1:de:55:22:6b:5b:5b:cc:
                    f9:34:ed:66:b4:27:fb:3f:66:bc:ef:08:e2:4d:1b:
                    20:6d:75:fa:b6:1d:08:d8:c7:d8:d0:3e:8b:d5:d8:
                    88:2d:5c:fb:59:27:3d:d2:a8:27:f2:14:60:44:9b:
                    de:5b:85:14:4e:b0:43:0b:99:c6:0f:87:ba:05:a5:
                    e3:e1:ea:a0:41:c9:91:e4:6c:4c:4a:29:63:86:c7:
                    2e:2a:a5:b0:cb:d1:3c:1f:63:42:91:71:f6:3d:01:
                    61:a5:4a:0d:65:97:c5:a3:ce:74:28:b6:95:3d:3d:
                    76:3a:25:37:e3:2d:8c:e1:04:1d:80:bc:ea:02:cd:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8B:59:AF:93:C7:B2:43:D0:D3:8C:92:52:1E:31:66:70:85:CB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/63a2688f-9916-362f-afd7-09bfbd816217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:92:c3:11:ad:d3:bf:37:ba:58:25:98:7d:c6:14:6a:9a:
         75:ea:cb:0f:2c:55:6c:a8:34:25:51:b3:85:3f:be:c4:6b:4c:
         4e:c2:79:e8:a7:38:e2:06:1e:d6:54:6d:2b:69:cf:32:18:ad:
         b5:72:8d:b2:90:d2:d6:24:13:28:84:4c:97:e0:1c:3e:a2:3b:
         86:00:a1:1e:8d:4c:59:bf:33:d2:88:8f:7d:94:27:b7:a4:4f:
         f3:d2:71:10:ec:3d:ed:36:f5:fb:b7:5e:89:57:28:bb:41:06:
         0f:22:39:f8:69:e8:0b:ac:52:b9:98:36:ec:93:bc:57:1b:f4:
         a0:03:98:bf:54:9d:72:69:d6:57:07:09:4e:19:60:a9:2e:e6:
         ae:3b:5f:8a:b4:64:79:9c:3e:0a:54:33:6b:4b:63:56:d4:59:
         80:8c:72:43:32:13:53:56:c3:31:38:e3:42:ab:e4:a1:b2:ac:
         02:64:e1:76:f3:69:c9:31:02:b2:bc:0c:a0:c7:37:8f:cb:53:
         ad:72:e7:81:59:b3:df:b1:ae:d2:81:a4:15:ae:f9:38:24:17:
         ba:ad:64:03:3a:87:a7:bd:db:5e:e9:fe:f5:c6:bb:b5:c3:ca:
         96:c1:b3:7a:39:40:c7:b8:ac:7c:dc:91:32:a2:ae:4b:30:37:
         a5:65:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:56:43 2025 by rpki-client