Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa
File:                     0a7cb37b-abdd-3cec-b31c-135bb742418f.roa (raw, json)
Hash identifier:          CY7QE7mFH6DVlgm6dgaPogOGpKMfKCSW3phkswgWFtY=
Subject key identifier:   7E:30:61:55:73:CF:65:6F:31:25:B6:72:60:01:69:85:91:ED:1F:EE
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584A3B7AF99A8BBD2513111D3D80
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     27425
IP address blocks:        2606:2600::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f9:9a:8b:bd:25:13:11:1d:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=72e73fb8-e26d-485d-9ed4-f20e7bff9afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:d9:e9:de:21:a0:62:54:94:73:c8:98:8b:
                    16:62:e1:c9:53:e6:98:45:ac:2a:cb:6e:1e:86:b9:
                    ce:05:49:b0:d0:05:9e:7d:d5:c0:4d:13:f7:e7:6c:
                    7e:9b:55:5e:86:bb:58:ce:64:ae:b5:5a:2c:4e:64:
                    13:f9:90:03:87:44:0c:ef:ae:9e:dc:36:1c:05:23:
                    7c:a8:c1:1b:6a:26:58:99:75:ad:53:6c:27:e7:b4:
                    e5:8b:88:8a:51:f4:6a:d6:c5:4d:e3:4f:c1:1b:54:
                    d6:13:26:1e:b2:e0:54:53:0a:63:59:5d:8a:88:dc:
                    cf:6e:f8:3d:78:7e:80:c5:37:6f:68:c3:bd:5f:f1:
                    21:e6:c0:7f:fd:d8:04:b8:03:e9:f9:54:37:8a:f1:
                    f4:b0:dc:32:d4:75:cf:69:c8:4f:9b:d2:6e:5c:37:
                    a3:1c:2f:ba:c5:33:29:f3:82:ee:7e:42:12:df:1f:
                    fa:85:06:4d:e3:a1:1f:ed:f9:02:71:d4:50:e7:03:
                    dd:51:73:d0:fe:45:8b:e5:f9:c5:54:14:8c:1c:6a:
                    ed:ab:ec:9f:aa:93:fd:7b:34:4d:fd:7e:9e:c1:c9:
                    22:ef:69:c2:65:d2:df:9d:70:9f:70:b4:df:8c:c2:
                    5b:37:e4:6f:6b:89:cb:7d:8a:35:85:37:2f:37:5a:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:61:55:73:CF:65:6F:31:25:B6:72:60:01:69:85:91:ED:1F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:02:be:34:42:9d:c2:2a:63:a7:b1:93:4b:f1:99:f8:28:
         20:40:b5:c9:71:56:75:c0:9b:ad:9a:55:98:4f:cb:c8:4a:9d:
         d0:fe:57:16:16:87:8a:07:f5:06:1a:70:ea:43:3b:f6:2f:2c:
         90:6c:c2:ce:4b:b6:24:99:0a:a5:31:51:1f:ef:eb:30:df:ef:
         d8:59:4f:f1:d9:2d:07:b9:2e:d4:c5:c6:41:b9:a5:7f:a5:6a:
         84:4f:83:cb:7a:eb:f5:d7:a3:6e:5b:98:54:2b:c6:ce:09:ee:
         16:bc:36:41:da:94:10:bf:22:9d:fe:4d:9a:d2:3e:58:a9:3c:
         aa:ef:a2:be:04:f7:c7:dc:bd:a7:73:02:a1:10:ab:15:6b:ee:
         fd:86:8b:10:57:84:03:98:9a:b7:f8:14:c4:bb:0d:8b:d4:3d:
         aa:a6:7f:46:9f:93:dc:1f:2f:ce:0b:68:28:07:15:68:4e:a9:
         e4:21:0b:fa:a8:b7:90:f4:b3:ab:f7:9c:37:30:af:99:86:5f:
         b1:4c:ed:d8:c9:58:74:c0:bf:29:e9:73:95:97:64:a1:9d:92:
         ae:e0:bf:27:e0:e0:4f:67:77:04:f8:62:cb:b9:ec:2e:65:3b:
         93:c0:de:98:2a:10:52:4e:c9:14:56:c2:10:2f:22:d8:27:2a:
         9b:9f:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:23:22 2025 by rpki-client