Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
File:                     6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa (raw, json)
Hash identifier:          /8JGHZHkqxhkiAuvmw9Q5QHpWtfNstHfu46hLsQ6gHc=
Subject key identifier:   D9:06:13:C0:1A:F9:DC:9A:44:09:6F:DE:89:0B:D7:36:8A:CE:93:04
Certificate issuer:       /CN=55e7b8e0-0df5-4481-84e4-83619b05f966
Certificate serial:       010D0C9F43285849FE0FE67EB3B3873622160BD0
Authority key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        2606:ec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e6:7e:b3:b3:87:36:22:16:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=12824e83-02ce-4363-9220-87490311a1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:dc:d1:ba:b3:3b:98:4d:35:5c:aa:86:b0:
                    cf:d3:50:c0:5f:6d:36:29:d5:26:3f:36:d8:52:1d:
                    b8:62:9f:c0:e4:2d:33:27:be:90:0d:f9:b6:68:bc:
                    86:c2:46:f9:aa:b4:4c:57:04:ce:12:43:ec:bb:25:
                    a3:09:3c:ea:8a:fa:72:43:5a:bd:99:ce:dc:38:a1:
                    2c:c3:74:60:94:da:45:1e:68:b7:e6:71:78:d8:9d:
                    63:6c:1a:9d:49:ec:a1:a1:bd:8d:46:b4:eb:a8:50:
                    9f:24:73:3d:85:5d:da:f7:a3:4d:d0:b2:3c:4f:76:
                    11:7c:64:94:6b:8f:f8:19:9e:4f:01:59:fa:de:da:
                    bd:82:c4:e8:8d:ad:ad:41:f2:35:91:61:58:cd:13:
                    3e:48:e9:bd:4c:48:24:8b:ea:f3:39:88:e2:f4:cb:
                    0d:0a:b6:d1:90:a7:f4:2f:ae:65:1b:3f:ed:89:b2:
                    08:3f:78:0f:fe:ac:ab:1b:af:93:a9:1b:8c:e5:bb:
                    fe:67:08:98:31:6a:6c:fe:bc:51:8d:1c:25:aa:e5:
                    f8:bf:28:7e:16:60:77:26:b0:34:1b:87:3b:d1:89:
                    34:52:82:bd:2c:9d:29:7c:da:ed:8d:45:b3:74:ac:
                    c8:34:17:39:fd:8a:f0:97:17:8d:6d:4f:36:53:50:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:13:C0:1A:F9:DC:9A:44:09:6F:DE:89:0B:D7:36:8A:CE:93:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl

            X509v3 Authority Key Identifier:
                keyid:61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ec0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:96:da:de:97:ee:0e:4e:4e:3d:d7:80:36:8d:5d:1f:b0:ea:
         4e:3b:64:fc:73:cf:1d:a2:77:54:6b:d1:ab:7b:ab:4e:2b:7b:
         22:1d:f2:a7:76:87:9e:e4:4c:8c:c1:06:e4:36:0e:46:24:4b:
         48:e8:63:65:d4:a1:08:33:c3:6f:29:91:15:f3:ce:08:08:23:
         b9:50:5b:25:7f:e4:79:cf:04:b7:9a:89:5c:54:3e:15:58:f4:
         5e:5f:9f:56:5a:30:02:21:fd:d8:a8:b2:44:e4:73:b6:54:90:
         fc:59:41:ee:26:dd:3f:e8:0c:71:83:d6:73:ba:e3:9c:c8:c2:
         ff:28:e2:77:0f:f0:ba:82:a9:1b:03:ff:eb:c0:91:42:45:7b:
         25:ec:8d:62:c8:98:62:a4:cf:24:38:bd:19:67:30:62:29:a7:
         8d:d8:cf:4e:99:b7:72:b2:ed:1a:d3:8f:91:ea:62:42:46:04:
         5f:f6:c1:7b:44:78:3e:dc:09:32:24:e8:fa:ab:63:0f:e4:29:
         48:8c:43:a8:bf:97:99:da:fb:d9:3b:85:d5:01:7e:b8:d2:a7:
         07:0e:dd:6c:8d:d9:7f:5e:12:8a:90:eb:f1:41:1d:b8:4f:ff:
         96:ea:58:c1:3a:76:29:8d:ee:a1:13:01:18:f8:d5:84:41:91:
         e0:d0:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:43 2025 by rpki-client