Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
File:                     927fe1cd-0450-3edf-9f91-6026bc74aeba.roa (raw, json)
Hash identifier:          +eZUriRrV6dHH/jdHoJs0QfdqH19Tj4toeAZdkQWEfM=
Subject key identifier:   B2:9F:1B:B0:80:E7:D0:33:8A:50:BE:F3:78:96:D4:BB:84:E3:BE:96
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F4328584A0C0577B4940B8CBE07EEEB00
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     20473
IP address blocks:        2620:c7:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:77:b4:94:0b:8c:be:07:ee:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6b670f5d-5ed9-4038-b733-29785cf29798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:8d:2d:25:00:75:fa:20:ca:c2:be:35:77:
                    39:d9:ad:6a:80:2c:5f:93:40:e6:5a:e9:2c:d3:3f:
                    06:d9:d8:d2:07:ff:9b:bf:1c:b4:5a:b2:4c:d2:98:
                    79:bb:61:c7:bf:57:1a:91:ec:b7:69:c8:ae:91:b8:
                    92:f5:60:b4:24:57:14:8b:7d:79:6f:bd:cf:22:c4:
                    24:06:0f:64:98:84:71:a6:d6:31:a3:91:bc:91:28:
                    be:1e:92:8f:f0:d8:59:2d:17:8b:28:5d:a6:72:d4:
                    37:ad:f4:21:f9:71:34:9b:78:1f:c0:b9:2a:e9:8a:
                    1c:0f:18:45:0a:b4:9a:72:17:35:e3:f6:d0:fd:89:
                    48:ae:c9:ba:bf:5f:16:c4:06:92:fe:4b:ba:dc:58:
                    60:8f:9f:c1:ff:ad:2e:3e:8a:ba:43:6f:d7:da:fd:
                    36:ab:f7:35:a6:2d:62:19:dc:10:ec:87:71:6e:b4:
                    cc:41:f6:d8:63:ae:53:a8:87:36:58:bc:ea:37:81:
                    2f:e5:61:17:9e:7b:67:15:a0:8a:7b:bd:11:17:6a:
                    f7:e5:78:c9:dc:bf:92:e1:4e:f4:b3:1f:50:bd:a8:
                    2e:9c:48:e6:4f:e2:3f:d2:6a:29:5a:65:c6:13:3c:
                    c4:9d:93:36:1f:25:3c:b8:ab:fc:01:82:15:77:25:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:1B:B0:80:E7:D0:33:8A:50:BE:F3:78:96:D4:BB:84:E3:BE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:17:bf:58:79:83:48:23:b1:76:16:54:bd:99:de:b3:2b:
         96:ec:61:fa:25:18:5f:d8:dc:fe:3b:97:b0:a2:97:d4:bb:43:
         a7:f4:1e:19:23:09:83:37:23:f5:0a:83:8d:2d:39:0b:1b:aa:
         b0:4a:3a:86:cb:26:ea:e9:62:87:9a:85:d6:6f:29:93:2a:2d:
         32:3d:ba:c6:07:09:ef:07:8a:54:55:83:b3:34:db:b4:9b:dc:
         89:37:49:45:26:d9:d3:89:16:51:39:56:7e:2d:1f:8c:f3:d5:
         d3:59:89:c9:b7:a7:28:57:3d:1e:b0:27:9f:8e:05:74:a0:31:
         a9:79:71:4a:d7:24:49:4a:c4:f2:b6:0a:28:1f:70:2f:92:af:
         23:35:4b:2b:1b:0e:19:48:f3:14:90:42:2e:39:c5:83:33:60:
         c4:61:1f:ed:ef:38:43:7c:12:0a:d4:9c:29:31:e3:f0:95:84:
         b5:2f:68:b2:cb:3c:7e:36:1e:54:b4:99:bf:31:70:3b:56:24:
         7a:f8:49:51:06:d3:8e:57:de:71:e6:5d:fd:ee:63:57:bb:50:
         ee:52:f3:d7:af:9b:64:46:e7:5b:f7:19:44:df:e3:30:ec:fc:
         57:da:9a:f2:78:2e:b9:0c:7b:58:2b:2d:35:83:e7:a7:05:40:
         75:57:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:44 2025 by rpki-client