Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa
File:                     1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa (raw, json)
Hash identifier:          w1FFbdS0wxwgR+h9XFc06j18Ucq83x2n+sWdAHPwd+c=
Subject key identifier:   C2:46:BB:64:C9:9D:27:22:E2:E8:0C:8D:76:42:DC:1D:28:6F:DA:10
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584A4DA0461FCF241FA36D093A80
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     15171
IP address blocks:        2605:a940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:46:1f:cf:24:1f:a3:6d:09:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=a2bb8e49-c07d-4724-9c80-cb0e42d2fb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:50:fd:36:ff:88:f5:d6:7e:26:af:42:13:
                    68:32:ba:43:e2:ab:73:ad:99:57:d2:2c:1e:ef:d2:
                    75:12:9d:68:c5:69:72:87:39:8a:52:2a:78:1d:cd:
                    92:eb:cc:a2:d5:3e:dd:de:01:17:ab:9c:1f:0a:72:
                    67:3e:31:e5:3a:f6:21:79:97:28:e7:15:53:c7:5a:
                    77:af:af:2d:fb:fc:10:da:cf:1d:b3:49:a1:26:c1:
                    54:30:21:f1:4e:34:c2:25:ff:c2:30:95:9e:e4:68:
                    10:a6:f3:2a:ae:cd:ad:9a:f2:fd:db:60:bf:d7:10:
                    37:76:57:d7:6d:f8:ca:9b:61:ae:22:05:d2:1a:ad:
                    8f:89:72:b4:b1:45:f2:4f:7f:2c:71:15:b5:63:f5:
                    a6:3d:c4:a0:a0:9f:ee:75:73:81:3c:f9:7a:87:9f:
                    6b:7b:2a:69:7b:ef:68:92:74:0c:d8:fe:53:b4:06:
                    cc:64:b7:b9:61:e9:db:2c:e7:45:2f:90:1b:5f:e7:
                    82:70:92:67:67:2e:85:0d:2e:18:b2:5b:90:0f:f2:
                    0f:4d:8b:51:a1:19:93:ef:c4:24:d4:e2:d2:39:0e:
                    88:c1:f0:a8:21:fa:3c:2d:67:0b:5a:08:43:9d:66:
                    21:29:b3:e3:b1:fe:b7:31:43:cf:73:3a:31:d2:55:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:BB:64:C9:9D:27:22:E2:E8:0C:8D:76:42:DC:1D:28:6F:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/1ef992c6-cca8-3207-9c54-b2d4dbc7568c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:0f:63:58:4f:cd:3e:f0:2e:e9:5e:64:ed:36:b4:f1:e7:
         37:cf:c5:09:44:64:dc:74:1c:ae:2f:26:c2:45:5d:e2:2d:ed:
         74:75:4d:e7:df:cc:ae:0b:d7:15:3b:23:01:5c:4a:35:27:32:
         e1:b7:8f:0a:74:53:48:fe:88:fc:7c:a9:ab:02:64:5f:1b:dd:
         07:70:e6:23:42:40:24:d1:5f:79:3c:fc:0f:30:f0:ae:18:b7:
         61:60:a8:30:1a:67:9f:9e:38:11:2a:4d:0b:96:72:5e:78:6d:
         0d:8c:60:b0:b8:18:47:3c:00:b8:b5:17:33:97:95:1b:a0:f6:
         80:69:6e:c1:dd:02:5b:bc:a5:f2:cf:b8:c6:81:05:b3:d8:13:
         ef:09:a7:97:e5:03:e4:75:c2:14:69:08:77:db:0e:a0:e9:3f:
         5b:24:dc:7b:d6:47:25:15:00:97:ea:e0:65:55:b0:6b:a4:91:
         54:bd:79:91:2a:cc:40:b1:e2:08:cb:44:f8:9e:de:73:e2:f3:
         6c:64:8d:d7:d5:fc:80:17:f1:19:6a:cc:36:d5:23:6d:49:d0:
         e5:e9:0d:9b:27:f1:37:91:bc:79:76:da:75:78:b9:03:20:ee:
         2c:cc:e5:72:8d:24:ba:1f:2d:68:83:8a:e6:af:78:67:cb:1f:
         4a:b3:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:15:58 2025 by rpki-client