Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa
File:                     dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa (raw, json)
Hash identifier:          ES3FUpZMohLN1KYL1bonkbEXUL6U7/rv9RaGuc3k11U=
Subject key identifier:   21:05:A8:3F:2E:66:9E:1B:D5:27:D1:29:6C:76:DB:FA:FD:6F:AF:F4
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F43285849D85F87810CD5A1940FEA4980
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     9009
IP address blocks:        2605:3b80:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:87:81:0c:d5:a1:94:0f:ea:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c230f822-9e33-42a9-b4d8-43527f2a641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:22:4e:71:85:df:80:1e:bc:64:74:73:0b:
                    8d:71:6e:28:98:5c:cd:f8:0f:ae:e3:9d:83:8a:ce:
                    dd:11:f0:bb:dd:9e:37:98:34:ef:99:86:b4:d3:50:
                    d6:fe:f7:81:c9:c3:c0:a7:34:a4:4f:01:56:df:e0:
                    35:f3:70:12:86:22:c7:15:95:6c:31:50:a9:0d:4e:
                    02:8d:c6:9e:7e:dc:f3:0d:d3:82:bd:c8:61:f7:f5:
                    06:08:7f:2c:34:bb:b8:4b:66:b7:5e:cf:dd:49:98:
                    d1:23:52:bb:97:b1:77:3a:ca:1f:b6:d9:04:fe:dd:
                    62:bd:e4:3e:13:89:6a:f4:bb:75:db:96:7f:e9:03:
                    13:e8:47:6b:a2:79:62:bd:10:0a:0c:c2:1b:8f:1f:
                    3f:c7:5b:92:7b:c1:c6:31:d9:d3:49:5a:ee:a3:d1:
                    34:7f:fc:38:5a:7d:7e:8b:75:91:83:cf:d1:8a:5c:
                    12:cf:aa:20:06:0e:f5:4c:88:b9:b2:62:ac:b6:77:
                    70:a7:6a:93:e7:f3:e3:2d:a0:ab:87:6f:a5:f9:50:
                    e2:37:5c:62:3b:50:65:88:33:55:be:00:87:35:f0:
                    30:f0:33:f7:6b:36:90:d7:7d:4f:dd:44:6b:54:5e:
                    f0:c7:54:9b:83:2f:ef:ae:6d:a1:af:20:d1:31:79:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:05:A8:3F:2E:66:9E:1B:D5:27:D1:29:6C:76:DB:FA:FD:6F:AF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:51:84:f1:ee:46:d3:e0:20:4e:ad:fd:1c:df:e1:a8:be:
         0f:af:f6:5d:d4:a0:cc:4d:e2:4a:38:3f:42:34:6d:ca:00:78:
         ff:bc:fb:f4:59:a0:79:56:76:12:e7:07:07:a3:ae:a5:ca:82:
         84:12:69:7a:99:1a:2d:8d:b5:39:07:4f:46:0d:f9:88:df:b5:
         b0:94:33:02:6a:1e:da:3e:e3:86:f8:39:7a:e3:21:f6:d1:9e:
         7b:43:53:68:c1:88:30:a6:81:0c:be:ab:1e:eb:dc:0c:1c:c3:
         4b:0d:91:46:38:32:eb:3f:c2:58:31:1f:c6:a7:19:df:2a:05:
         f4:6f:4b:c1:82:4f:00:f7:28:2a:9b:da:42:17:39:ee:3c:06:
         bc:1d:ac:c0:65:98:c5:55:d0:2a:b7:63:a8:90:fa:33:99:03:
         55:96:0b:8c:eb:72:e9:94:f3:75:43:0f:b9:ee:41:6f:31:a0:
         6c:8a:be:d3:28:dd:6f:db:78:c8:f2:41:d1:25:f7:c0:62:c8:
         4e:58:c9:bd:4e:35:d6:df:eb:4a:7b:61:89:4d:05:90:2d:6a:
         43:ad:96:a7:8a:63:2b:1c:12:e4:95:90:52:41:81:9e:37:b4:
         cb:23:80:63:fc:9f:94:64:45:42:a8:9b:e5:2d:df:0e:ef:bd:
         c2:d5:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:47:40 2025 by rpki-client