Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa
File:                     bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa (raw, json)
Hash identifier:          ZdO9Q3ktoOsressyJxZ/ZarViet35uqn7/KMi7jZvcQ=
Subject key identifier:   38:5A:BB:DE:1B:3F:A6:A9:C8:94:D4:26:10:B7:11:36:FA:0A:17:A5
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584A3FAAD4FDAC4E0515BDB6D340
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     53454
IP address blocks:        2605:2480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d4:fd:ac:4e:05:15:bd:b6:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=9fdeb5f7-a2b7-4407-8501-cf6ecb3d669a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:7c:11:40:f9:7d:22:9a:1e:4b:a7:03:76:
                    12:cc:5b:20:9c:6d:1b:04:cd:8e:ee:45:9e:b7:79:
                    de:38:72:1d:9a:36:ca:6d:ed:10:be:32:ff:27:f6:
                    73:a6:67:8f:18:4b:a4:13:73:aa:96:7e:7d:a1:f5:
                    7f:00:6f:3c:19:bf:58:b1:aa:da:c3:94:cf:a7:07:
                    52:7c:5d:65:57:7e:6f:ef:62:be:c1:2c:94:98:11:
                    77:00:68:a7:f1:3a:b0:f1:92:88:72:71:99:79:c6:
                    ca:cc:66:55:a3:da:7c:e7:0e:15:27:d6:24:6a:b2:
                    80:d4:d8:a3:a8:47:90:c9:6e:9f:3b:36:47:87:0c:
                    03:63:f0:b5:1f:e8:ab:3d:02:e8:57:4e:60:c8:ce:
                    34:3c:89:62:e8:bf:64:e1:d2:47:4b:2b:ff:2d:3e:
                    6d:e5:56:e2:8c:5e:d7:5f:97:7c:72:18:d7:f5:c2:
                    fe:af:77:86:a4:0c:50:7a:10:82:83:db:f1:6c:19:
                    5e:ba:c3:1d:b8:d3:cb:24:b9:88:6b:60:4b:4a:1b:
                    35:c1:18:58:cd:71:d0:c9:5e:39:e4:d8:64:09:b6:
                    fa:de:b2:92:94:34:b3:1d:41:0e:3e:b8:4c:8f:10:
                    e6:db:cf:62:50:2e:22:ed:8a:a2:2b:1e:98:80:e9:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:BB:DE:1B:3F:A6:A9:C8:94:D4:26:10:B7:11:36:FA:0A:17:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:39:37:10:50:cc:ff:d9:ac:c5:44:d7:20:3f:94:47:1c:08:
         c9:6f:10:55:1d:86:e8:b2:43:98:3c:0b:a3:f0:c9:00:8b:07:
         d2:04:36:4c:c5:e3:2c:6e:95:38:52:58:2a:42:5e:10:4c:fc:
         43:fd:87:18:61:fe:d8:05:33:b5:a7:5b:57:f9:f2:c7:e1:11:
         d4:67:04:b4:6b:38:86:59:7d:99:86:eb:03:02:c9:5c:7d:9f:
         e5:b4:db:0a:10:9d:5d:68:8f:50:a0:88:0b:45:e0:2e:ed:0f:
         d4:d5:48:ec:5f:f3:cb:49:3d:c8:24:f1:18:e0:6b:46:80:d3:
         0c:f6:d1:6b:aa:24:bc:b3:d1:bf:5c:46:40:41:54:05:98:54:
         ad:95:93:b3:77:bb:89:29:74:89:34:85:e2:df:e5:ab:ec:0c:
         6e:24:3f:c6:5e:d6:fe:9a:1b:e6:e3:27:d5:9f:54:72:b9:f2:
         b4:8c:a1:7b:31:44:a6:d4:db:62:48:b4:bf:7a:c0:35:36:9d:
         13:5c:87:c1:2f:74:9a:61:94:2b:dd:52:c5:aa:d9:30:14:38:
         d2:6a:ef:8b:cb:8c:2f:5b:19:b1:14:37:72:68:2a:52:d8:fa:
         bb:54:d4:bc:62:6a:44:80:fa:d1:26:cf:5c:62:d2:24:17:2b:
         af:e7:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:47:10 2025 by rpki-client