Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa
File:                     f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa (raw, json)
Hash identifier:          H7yZT6AWqpl0wVZcdwxyUvw7jQXbToDlzrCOuIMmigg=
Subject key identifier:   B3:C9:AD:85:FE:2F:E5:13:52:E4:11:40:04:8D:35:90:12:50:86:AE
Certificate issuer:       /CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
Certificate serial:       010D0C9F4328584A3480252E6C32494BEC70E8C0
Authority key identifier: 90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     36064
IP address blocks:        2607:c740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:25:2e:6c:32:49:4b:ec:70:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=1e66bcff-32a5-448d-bb0b-316a3cfd7d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:9b:27:c9:9f:7a:65:e3:0d:54:d2:d9:bd:
                    8a:e4:6c:a7:f3:f6:e9:03:01:3b:2f:a7:02:5a:9f:
                    f5:da:1b:d4:69:2c:d9:f6:f3:a7:d2:a0:af:e8:f8:
                    a0:fa:b9:3c:50:fc:64:96:88:cc:5d:30:ba:51:3b:
                    b0:30:a7:23:93:16:a4:07:46:13:b7:da:6d:3f:5a:
                    34:48:73:ab:88:d9:af:ae:02:8c:30:7a:a9:23:5a:
                    73:62:a1:69:77:e7:ab:65:37:b6:61:fc:a4:95:7c:
                    15:4a:e5:c0:83:33:55:13:7c:1d:99:c5:09:6d:63:
                    75:0e:f3:4a:52:08:c5:da:24:2c:6f:fe:64:d7:17:
                    89:d5:41:0e:f5:ca:66:ef:5a:2d:31:e0:5d:9c:de:
                    34:71:42:b1:5b:d2:fd:00:4e:e2:0f:1a:d7:44:ff:
                    f5:bc:4e:9c:da:49:51:e6:e8:84:8f:09:30:cd:e2:
                    94:26:af:6b:b5:f5:cd:a9:c3:9f:39:3a:55:3f:df:
                    02:4c:26:85:be:32:f7:d1:ca:a4:fc:49:cf:5b:1f:
                    59:6e:79:a9:37:42:ad:c4:14:4f:b6:35:5d:2f:79:
                    07:e1:60:3b:14:23:2d:c6:44:1d:7b:d7:0c:86:a8:
                    de:f4:d9:50:f8:c2:f0:1e:91:0d:62:76:e8:0a:ca:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:AD:85:FE:2F:E5:13:52:E4:11:40:04:8D:35:90:12:50:86:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.crl

            X509v3 Authority Key Identifier:
                keyid:90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:8b:39:7b:6f:83:e8:8a:22:a2:57:8b:c9:08:d7:b5:f3:
         56:4b:65:d6:f4:a0:a6:0b:e3:1b:49:37:0d:fc:ad:32:6d:95:
         7a:1a:89:7d:2f:d9:1d:df:32:ad:b4:28:0d:a1:d2:eb:dc:4a:
         a0:90:9b:4a:33:42:49:c2:b2:0d:44:cb:36:c5:57:7e:25:87:
         21:15:ea:7d:66:d4:d7:64:1d:fb:e2:c8:55:03:47:f4:4a:c7:
         e3:d5:45:dd:f0:d2:74:95:1e:ab:78:9a:f6:ee:a3:4b:0c:cb:
         58:42:18:81:4a:c7:89:7b:83:86:43:70:b9:28:a3:5b:d8:7f:
         1e:4b:65:79:3f:88:48:d5:2d:91:e4:c7:36:c4:4d:a5:3b:f0:
         75:94:a9:fd:46:24:ec:c6:ae:14:00:cf:ee:ca:f7:59:8f:1d:
         0c:0a:c5:c4:02:1a:fd:f2:23:15:90:5e:93:9e:a2:62:d4:c4:
         2c:38:66:ef:2f:3a:4c:1e:0d:ae:1d:52:a6:3a:fa:bf:91:d4:
         59:66:41:05:67:10:e8:35:4c:eb:32:45:7c:08:5b:b4:b8:01:
         fb:46:74:8d:28:96:9b:de:92:b1:52:22:e4:fe:2a:96:ad:cc:
         42:1a:94:de:87:40:26:a5:70:89:c7:65:54:cc:d5:ad:0a:cf:
         28:93:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:31:04 2025 by rpki-client