Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa
File:                     25edb3ad-e815-39b4-90b1-b87034b7d60f.roa (raw, json)
Hash identifier:          tsJsy64on3fjl0k7182BFlP1DHO88oIkb2ltm8tuaRY=
Subject key identifier:   4B:D2:92:5D:E5:8C:87:7B:FE:6E:82:8A:D4:8B:6F:CF:C0:78:80:1A
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584A5600433231D02408DEE8EB18
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     13506
IP address blocks:        2610:108:bf10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:43:32:31:d0:24:08:de:e8:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=430aeba3-d31a-472f-8ec7-6bc3348b080c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:02:44:c3:05:c6:24:2c:63:98:7c:a0:3a:
                    dd:42:d7:3b:60:f6:da:b0:68:67:00:6c:36:51:8b:
                    43:f8:ba:37:c4:4c:7a:22:1a:49:53:a8:53:c4:a4:
                    c3:06:31:e3:a5:a6:20:5f:95:14:bd:23:83:7f:23:
                    63:2d:39:18:be:d7:fb:d7:bb:fb:4f:1c:70:1c:14:
                    c0:15:32:cc:3b:45:7b:dd:3a:e8:9f:38:f0:2e:fd:
                    2d:be:7d:79:a0:db:16:73:51:9b:2d:95:04:b1:6f:
                    d4:d5:57:9f:ec:7f:35:a4:b3:24:db:6b:a3:6d:f9:
                    73:3d:7a:55:aa:c9:46:85:f8:ab:0c:5c:33:fb:64:
                    43:43:08:46:e4:0b:c5:5f:fa:01:56:aa:c6:9c:23:
                    42:78:ca:c1:e4:14:29:6a:ca:0d:0f:62:e4:cc:40:
                    bb:e6:c8:ee:7b:ba:a5:ed:e0:6a:24:33:e5:91:c2:
                    ff:ea:61:91:f2:84:1f:86:41:c4:f9:fb:a8:e5:91:
                    58:e3:21:6c:60:2b:16:cb:bc:0a:6b:5c:00:a4:33:
                    b7:12:0d:af:9a:36:99:d4:69:e2:71:25:b9:52:ad:
                    ea:e8:2e:a2:d9:1a:63:5b:12:2f:72:93:dd:bb:28:
                    0d:76:08:26:cb:09:b0:1e:08:6c:71:4a:3a:70:d0:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D2:92:5D:E5:8C:87:7B:FE:6E:82:8A:D4:8B:6F:CF:C0:78:80:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:cc:a9:fc:98:2d:43:2d:68:e4:e8:53:79:a3:f9:3e:7a:
         10:db:98:0b:23:13:c0:7c:81:6a:d1:03:0e:3e:13:d7:7b:d5:
         22:8a:16:61:99:1b:d9:42:f9:4f:90:8b:32:32:65:e0:67:9e:
         67:f0:3a:75:6e:ea:25:da:8d:e2:06:d0:91:76:4b:90:26:52:
         aa:cd:db:ec:a6:6f:b9:e4:62:f2:3b:de:1b:fc:70:50:cd:60:
         d0:37:ed:70:24:67:32:62:1d:9e:c2:a3:a9:17:28:74:e5:17:
         6d:c1:fb:4e:db:9e:5c:fb:96:ea:b4:63:ad:89:59:86:f2:f9:
         a5:24:4d:a1:a6:33:62:64:f9:e2:b6:ab:90:8e:97:bc:f2:af:
         39:b1:bb:d3:e0:43:fb:0f:c2:c3:e3:96:4f:6a:8e:c5:87:cf:
         09:03:a2:63:21:f2:e7:e8:8c:60:6d:87:dc:63:21:e6:75:22:
         3b:ab:6a:c1:87:a3:f1:4f:d3:a2:74:a3:0c:d9:b6:c4:f2:92:
         d0:74:51:a9:cb:c8:24:cb:e9:a6:72:34:43:49:94:c3:6d:db:
         1a:34:77:bd:15:45:5f:51:21:36:3b:da:c9:36:55:fd:b4:4a:
         75:75:51:7d:a4:46:1d:ac:7b:b5:60:62:e4:d5:72:45:2b:62:
         c5:d9:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:15:59 2025 by rpki-client