Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
File:                     5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa (raw, json)
Hash identifier:          balIi9PyJQxCoxICFyzcvpER+vESx7aMous+8imL7rk=
Subject key identifier:   24:C0:09:40:C0:A7:0E:F8:4A:2B:7E:29:17:53:C2:27:BC:52:2B:3A
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F43285849E4EFC584AC45645D527258C0
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        2606:7740:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c5:84:ac:45:64:5d:52:72:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=ad79df32-978e-4293-a560-78f8965eebc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:91:3a:9c:03:de:d4:1a:73:56:d6:f6:cc:
                    e4:dc:c0:59:66:b1:6f:10:2d:b3:52:a9:46:30:9d:
                    48:91:4f:06:c9:9e:e0:84:5c:a9:ef:35:99:30:e4:
                    6d:be:b6:22:15:6f:f3:0f:8d:83:6d:fd:c0:9d:d7:
                    34:c0:10:6b:b1:ec:29:58:cf:5f:62:99:4c:5c:5d:
                    c8:5f:a5:d7:77:17:6e:f5:15:a8:d7:ad:5c:dc:31:
                    1e:bd:41:ad:94:70:ea:d9:1b:c0:00:29:27:75:13:
                    08:b9:2e:4e:16:5b:9c:d8:70:5e:b1:a7:32:f8:75:
                    d8:45:85:ab:a2:5e:d1:9a:dc:08:d5:68:64:66:49:
                    0b:f9:d2:f4:9d:30:fd:0d:fa:1b:d4:5c:0c:ec:56:
                    ca:cc:51:58:04:2c:d5:a9:66:90:f4:99:f8:93:48:
                    6f:f5:f3:7f:78:23:72:75:11:f7:27:45:d3:fa:c9:
                    f9:82:bf:95:6b:ff:54:7d:c7:9c:f6:59:34:48:87:
                    80:ac:69:d9:32:75:49:ee:d1:77:12:a5:48:03:83:
                    03:8c:e7:b3:21:e9:fb:54:af:0a:c5:64:34:d7:b6:
                    54:e9:2e:6f:ac:1c:41:a4:59:4b:3d:4a:21:1c:54:
                    1c:bc:6e:33:c9:82:dd:02:fa:6e:d5:eb:76:79:76:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C0:09:40:C0:A7:0E:F8:4A:2B:7E:29:17:53:C2:27:BC:52:2B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:f6:c1:0c:6e:72:b4:74:1c:fd:3c:88:7a:ef:7e:04:8a:
         c0:56:a3:17:e5:01:f9:2d:53:8a:c7:59:8d:c4:3d:f6:2c:7d:
         50:6f:a1:c8:8a:e7:65:a9:ff:e3:5a:ab:ca:fa:a1:18:55:3f:
         72:fb:03:15:d2:f0:ff:f2:8f:3a:7d:5a:9d:8d:04:06:79:cb:
         a0:0b:fa:3f:d9:dc:ce:f2:80:fd:71:07:46:a8:12:34:48:a2:
         06:18:8d:af:90:c9:5e:fb:f5:8d:e6:f9:46:1e:f5:e8:f7:ee:
         9d:d0:dc:14:92:c5:e0:7f:ae:d2:43:5b:2e:5a:63:ec:02:56:
         0a:30:2c:2c:d7:4e:2b:5b:c6:b1:46:06:78:99:22:d3:2a:be:
         a5:3e:54:2a:fc:e4:b5:88:78:5f:49:11:1e:bf:2c:e0:52:ce:
         6e:8e:20:bf:8a:e0:2e:d1:e3:6f:2d:d1:34:78:6b:36:9f:b5:
         31:ee:f6:9e:df:c7:98:6f:f1:8a:d2:fb:db:39:8d:fc:d5:30:
         73:9f:71:be:de:e7:8b:51:b1:01:4c:d2:a4:ae:f3:fa:f7:54:
         35:1b:89:c0:07:e1:0d:57:ef:c9:ae:51:cf:37:98:84:c0:c3:
         e7:c0:c7:41:26:85:84:ff:5d:b2:04:6c:4b:7b:15:16:86:f0:
         45:b2:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:20:54 2025 by rpki-client