Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
File:                     1df56742-c777-32ef-bcab-01b39d58ce20.roa (raw, json)
Hash identifier:          /skRyRcIMfhJrD8aiNnt6L/OtWy34b0ulaz7zQoaIL4=
Subject key identifier:   C7:B6:E1:24:38:D6:5B:F4:7E:4C:CF:2D:C5:48:46:A3:67:27:C9:BC
Certificate issuer:       /CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
Certificate serial:       010D0C9F4328584A5CFB2B7C5B4786496D327480
Authority key identifier: F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     401307
IP address blocks:        2620:118:c000::/42 maxlen: 48
                          2620:118:c080::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2b:7c:5b:47:86:49:6d:32:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=414ed34d-89f0-42fd-a535-25f22f10f860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:59:cf:76:48:fc:46:96:09:4a:d3:96:40:
                    d7:d0:e0:5e:3f:a9:d5:6e:73:3a:b6:66:05:40:51:
                    c1:1e:4b:bc:5a:e7:9a:7e:07:57:b5:99:39:82:5a:
                    c3:aa:2a:42:1e:59:a1:93:31:6a:25:50:22:ce:e9:
                    b0:0a:fb:e2:df:41:5b:0e:d7:53:4e:c5:47:64:45:
                    00:63:b7:bc:88:f6:99:be:0f:4b:c4:f0:ec:ab:21:
                    8c:9c:ec:44:0c:32:fc:8e:8c:9f:07:45:63:82:c5:
                    ce:49:82:36:f8:20:3d:99:a1:24:f8:d4:9c:54:6c:
                    12:12:99:ca:12:1b:6b:74:d2:6e:d4:e2:62:68:14:
                    29:0b:a4:0b:0d:5c:a9:2f:4c:f7:0b:2e:05:46:1c:
                    6f:20:ee:47:f3:5a:d1:bf:88:be:54:ca:1c:17:e8:
                    94:03:95:78:2e:1b:4f:f5:52:a1:a3:1b:c9:d0:c2:
                    20:8b:72:ce:a6:48:2c:34:23:b5:1b:72:9e:4c:b3:
                    4f:1f:4c:56:d9:c9:73:f9:fa:86:92:24:6f:57:40:
                    b9:db:a1:5f:cf:eb:f3:a3:0d:d1:7a:ca:8c:dd:c2:
                    05:78:70:ef:62:bf:28:03:df:0a:60:b6:5b:ab:80:
                    f8:2a:fe:49:48:c6:63:f7:45:31:35:65:b9:ba:29:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B6:E1:24:38:D6:5B:F4:7E:4C:CF:2D:C5:48:46:A3:67:27:C9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl

            X509v3 Authority Key Identifier:
                keyid:F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:118:c000::/42
                  2620:118:c080::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:51:ce:1b:35:d1:93:ce:fe:cf:b0:a7:b0:b6:1a:b6:0e:
         d8:8a:f3:5c:51:bf:10:dc:b2:73:2a:96:d5:e1:27:db:aa:14:
         4a:24:7b:a4:2e:6c:89:a9:b9:7a:0d:8a:0d:2b:05:a3:f7:f0:
         27:94:58:3d:50:9c:48:90:de:5a:87:92:6b:43:af:82:e4:a8:
         8b:94:73:19:01:13:56:dd:71:17:31:30:0c:58:41:95:c8:1e:
         cc:23:af:7b:e8:d3:10:0a:7f:91:12:33:da:8d:67:73:a6:39:
         c1:fd:13:af:2a:f0:2d:a5:52:1f:e6:b9:fc:89:52:47:f4:df:
         97:b9:73:5e:9d:41:89:ab:be:a5:2b:ff:8d:2c:97:93:ab:17:
         09:02:f9:bf:cb:cc:bb:c7:c9:9e:38:d8:3d:f8:2b:cc:03:6c:
         17:36:1f:af:bd:ad:6f:8d:73:23:19:10:1a:9c:89:89:39:46:
         66:ed:29:b5:1b:63:04:8b:a1:60:f3:df:0d:ea:07:9f:53:9d:
         27:b4:c1:92:b1:f3:7b:f9:ae:55:f6:67:00:cf:49:73:e5:73:
         48:4a:96:c8:7a:e8:1f:b2:42:09:b1:3b:f4:e2:ef:be:6b:6c:
         d4:68:c7:78:f2:86:4f:21:8c:5e:4c:c1:7e:53:ff:f6:da:b0:
         d5:c5:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:25:45 2025 by rpki-client