Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File:                     0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier:          z8GsSxZnVy3r9n6GAmkbyabe87gK/eVa+1hWWkJDQUw=
Subject key identifier:   F3:F1:2D:29:9A:97:B0:FD:E9:7D:98:68:93:C3:14:50:BB:2C:AE:1C
Certificate issuer:       /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial:       010D0C9F4328584A10354E784B1B2A3DBD646B30
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     7105
IP address blocks:        2620:2::/48 maxlen: 48
                          2620:15a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4e:78:4b:1b:2a:3d:bd:64:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=cad3bcca-dd66-4b1e-8762-371a8fc93017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:bf:e9:7d:a4:f7:df:4f:8a:a0:8b:0e:1d:
                    ca:af:8d:0b:24:fc:db:ea:22:f1:e9:5e:ee:47:ae:
                    07:06:40:1a:02:ef:a3:78:0a:4c:fe:f0:98:c7:36:
                    8c:5c:e5:05:eb:c6:79:31:2a:da:75:67:bf:f8:ff:
                    be:cf:58:2c:cd:25:44:8c:12:8e:d7:c5:36:0e:2d:
                    04:07:43:c1:33:ca:c9:18:ed:44:f6:70:69:95:c6:
                    61:1f:cf:ec:12:80:21:75:a8:ab:66:e7:19:00:12:
                    e1:8f:1d:ab:63:71:d7:cb:c2:91:eb:c5:e6:a3:7c:
                    1d:f6:d1:0f:d2:91:8f:b7:48:f0:ca:a5:5b:64:15:
                    5d:77:b1:23:29:a7:3a:fa:dc:81:cc:75:6b:b1:fd:
                    e9:08:09:ea:3c:bd:ba:6b:7a:6a:f2:42:35:96:2b:
                    b4:dc:59:22:a1:1e:61:0e:54:66:d2:96:06:ff:7d:
                    14:01:fa:30:92:dc:b0:14:73:8e:98:8b:c4:55:6e:
                    22:b7:65:6b:68:b7:c6:f9:4f:a9:50:40:9d:f5:c1:
                    41:e6:80:00:87:29:a8:5e:39:4e:b7:ba:e4:e4:3f:
                    1f:00:a1:e1:d6:79:10:d0:d9:51:a8:a7:04:8f:b9:
                    b7:69:43:01:92:10:b5:21:90:c7:54:f8:26:17:c3:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:2D:29:9A:97:B0:FD:E9:7D:98:68:93:C3:14:50:BB:2C:AE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl

            X509v3 Authority Key Identifier:
                keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2::/48
                  2620:15a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:c8:a3:9f:ce:50:4e:67:7e:f2:af:84:d8:20:34:32:f4:
         ad:e2:8d:f7:aa:ca:8b:ec:aa:e0:80:87:7b:05:a9:f5:20:6c:
         d9:7b:08:37:47:09:63:74:08:a4:a0:45:25:8f:7e:d8:57:67:
         80:92:39:92:40:4e:99:de:5b:9f:d5:6f:17:dd:86:3d:c3:74:
         67:a3:2d:3d:7b:24:1d:eb:9b:7b:73:ef:b6:8d:bd:5e:3a:0c:
         8d:99:f5:8d:4a:fa:b0:49:b4:49:d6:74:98:38:96:c2:e7:8b:
         35:9a:a6:49:da:4e:53:77:2e:50:d7:fb:6b:a1:ac:5e:dd:0b:
         95:88:95:4e:62:2e:5d:a8:9a:8a:30:c0:e2:ef:57:39:ea:d8:
         81:b8:90:ca:20:15:69:f6:c0:71:13:85:a0:b3:c0:aa:ad:8e:
         3a:45:02:fc:74:45:c0:f0:f4:40:81:5f:02:53:a6:ee:37:80:
         1c:d3:d2:28:61:8d:f2:46:11:1c:73:99:2b:a7:91:d5:b2:5e:
         b2:3c:ca:2b:d9:8a:78:a8:d9:a3:0d:46:16:f7:ff:ac:a8:fe:
         c5:62:0c:77:bd:2c:50:81:4b:33:00:16:54:81:16:e6:9f:06:
         dc:3b:b7:73:b5:6f:3d:60:7d:38:a2:d6:14:a1:a8:36:ab:cb:
         09:e3:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:08:15 2025 by rpki-client