Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
File:                     6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa (raw, json)
Hash identifier:          NkOcvcrW9ogc5LVtWMcpysOvxGQHlrvbMI0tNClw3ls=
Subject key identifier:   1C:39:B2:09:D0:76:17:C5:1F:A7:45:F6:8F:74:0D:77:EC:60:C0:3C
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F4328584A43DB08ADE3217E1FE6BB47D0
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:08:ad:e3:21:7e:1f:e6:bb:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=149f1855-6731-41d4-8b56-fdbd527e5596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:11:2e:5e:76:e9:c3:6a:b6:16:8f:d4:fd:
                    02:5e:f9:52:e1:f6:4a:d0:9f:0c:3f:45:f9:82:f1:
                    1c:b2:37:1c:e7:61:07:84:d1:0a:2b:53:5a:e5:d7:
                    c6:38:db:95:fd:56:81:61:ad:bc:a4:d4:d0:2c:67:
                    19:fe:ec:1f:ac:11:94:37:f2:7e:10:ec:44:ea:31:
                    64:d6:ad:d9:29:84:80:c2:38:af:89:05:44:ff:e3:
                    62:06:68:fa:3e:69:4a:23:2f:e0:06:a3:43:90:da:
                    59:5d:dd:be:05:43:12:86:69:ef:39:f8:5e:51:93:
                    73:b0:ad:8b:12:0f:a2:5a:a5:7c:2a:e0:ce:24:e5:
                    e1:07:80:bd:8e:fd:7f:6b:56:9f:2e:e3:2e:d6:f1:
                    5e:ab:38:e4:44:ce:d3:d1:e1:fa:ee:4c:0d:7c:71:
                    79:1e:3d:18:e0:7b:91:30:f9:ea:24:23:92:4b:e7:
                    72:25:b6:e8:59:cf:52:35:76:cb:6c:c2:e3:ab:2a:
                    aa:bd:83:27:4e:4a:12:c4:a4:dd:f9:2d:4f:51:95:
                    43:0e:39:30:57:ba:7e:0e:fe:28:ea:32:47:f9:b6:
                    aa:8e:47:b4:7b:27:96:20:c0:65:0e:f5:ea:46:b4:
                    f9:0e:96:ad:7f:09:14:c9:a5:f4:56:a6:7d:4e:85:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:B2:09:D0:76:17:C5:1F:A7:45:F6:8F:74:0D:77:EC:60:C0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:36:fa:50:db:9e:4f:4c:da:26:e9:a1:26:f4:92:cb:50:
         0b:e7:22:dd:88:f9:76:ca:06:33:0a:04:7e:81:e3:b9:de:aa:
         ca:b0:e4:85:8e:10:86:b2:ff:53:44:01:07:fb:14:45:32:0a:
         2a:66:e3:e9:08:ae:7a:19:20:b6:37:6c:5b:73:70:86:04:56:
         df:cf:e7:d2:31:e1:6c:cb:e1:f5:4c:c0:e1:2f:62:f9:7d:dc:
         43:42:2e:cf:f0:c0:0d:a0:68:84:34:c5:ca:1d:e7:bc:70:86:
         99:8f:48:6b:fb:60:1f:3b:65:f9:a3:5c:ec:6c:94:d8:75:f6:
         e0:61:16:e2:c4:1e:27:73:d7:b1:84:98:8e:1d:14:7c:44:6a:
         67:30:2c:84:5a:5c:1e:08:ad:72:ba:62:32:72:54:44:dd:cf:
         6d:d2:ce:01:9b:aa:ae:f3:44:ef:cb:de:ce:45:31:ac:bd:35:
         bd:9e:27:bf:d8:c2:a3:c7:4f:03:de:31:02:d0:61:50:bb:33:
         50:7a:07:23:da:90:50:80:12:ef:ed:ac:ba:54:12:29:2c:a3:
         82:32:80:2d:98:71:96:05:15:d4:40:9b:6e:3f:8a:04:88:60:
         11:77:8f:e5:00:f8:e9:59:33:d2:e7:0b:c1:e0:9f:08:b2:ba:
         f9:4d:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:55:42 2025 by rpki-client