Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa
File:                     00284572-ea59-33f8-9f35-4491476aec57.roa (raw, json)
Hash identifier:          0wJ4V2LPHzFFL+EBquIUHs4hMzg6WYyBan9chaf4Gw0=
Subject key identifier:   DA:6A:14:97:09:D7:AC:FF:06:57:70:A2:AF:F2:59:52:98:C0:83:FE
Certificate issuer:       /CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef
Certificate serial:       010D0C9F4328584A480AE88B12EE7750216E5880
Authority key identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     1751
IP address blocks:        2607:6a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e8:8b:12:ee:77:50:21:6e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=b8bbd399-c06e-48ce-858e-9fd543de3e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:63:d5:d1:ed:59:fe:2b:a5:0c:c6:4e:47:
                    c2:9b:96:99:af:b2:80:75:ca:f1:01:98:81:fb:36:
                    76:3e:1f:c3:b8:ce:9b:43:3b:8c:6f:3a:2b:4f:d6:
                    16:2d:f9:7f:45:f4:63:4d:48:98:ef:43:50:b9:ed:
                    31:5a:28:05:0b:11:04:0d:10:70:65:f1:f4:b3:1d:
                    b4:79:e2:31:c5:74:bf:43:07:df:ce:3f:4c:c0:56:
                    12:c7:30:d9:ab:ce:00:8e:15:b4:5b:00:43:d9:04:
                    85:5e:c5:31:ea:3e:8f:f3:7d:5e:c3:2c:5b:4a:97:
                    23:cf:04:49:ea:6b:49:0e:a3:72:42:f8:11:c1:ad:
                    1d:99:05:eb:de:3f:cf:38:cc:ca:2c:12:0f:81:52:
                    c5:bf:f8:1e:d9:53:d9:97:de:ad:e1:4b:a8:11:d7:
                    94:64:53:63:8c:12:d4:e9:aa:1d:82:ee:95:b0:37:
                    de:da:72:36:94:1b:43:5c:52:ed:1c:50:3a:a8:a1:
                    c1:d1:42:fd:1c:97:66:17:5b:29:bb:d5:be:a4:be:
                    fb:c0:ed:51:8b:ff:c1:50:1f:ab:7b:c0:6e:5d:07:
                    7a:4d:4e:41:98:7f:74:fa:38:46:23:0a:11:1d:2a:
                    3a:11:8e:4f:1a:86:b5:87:73:de:00:21:1e:3e:71:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:14:97:09:D7:AC:FF:06:57:70:A2:AF:F2:59:52:98:C0:83:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/00284572-ea59-33f8-9f35-4491476aec57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.crl

            X509v3 Authority Key Identifier:
                keyid:A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:30:f1:35:70:65:36:de:c3:bf:86:6c:43:75:f9:df:da:
         0d:41:08:fd:5f:46:75:d7:cd:19:fa:cf:6f:f6:05:43:d6:44:
         5c:70:a5:77:b0:59:0e:64:a9:cc:97:59:6e:ec:1e:87:2d:45:
         43:ad:e9:5d:34:47:30:7e:9c:ae:51:af:24:22:c7:6e:fc:10:
         25:57:84:db:c7:64:d2:ce:e4:ba:b0:58:9f:60:25:0a:7b:ec:
         60:93:af:03:fd:6a:db:77:fe:d8:17:a8:1d:71:12:c0:6e:61:
         cf:d4:f7:4a:b2:52:74:f8:ad:e8:6b:01:c7:47:ef:d0:83:81:
         bb:78:df:4d:ef:47:60:cc:82:ba:0d:21:f6:2f:70:06:90:21:
         ef:52:39:8d:22:ca:0c:8a:4d:6c:39:8f:f5:66:6c:a7:0f:f7:
         cb:80:b4:61:fb:ff:62:d7:89:ac:d9:f5:dd:9c:ba:3a:7e:24:
         d9:5a:c1:1b:25:c2:4a:51:67:0f:1f:90:7d:d3:77:ec:cc:ef:
         fb:2a:1d:de:fb:10:8e:f8:0b:d1:b8:35:f3:77:39:45:b5:d7:
         61:79:2d:f2:e4:f8:0d:10:81:2f:52:74:c2:59:24:02:f0:24:
         c7:18:fe:dd:39:69:9f:68:5c:cf:36:53:7b:07:80:6d:2e:e7:
         74:59:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:16:50 2025 by rpki-client