Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
File:                     4e50a587-28e3-33c4-93d2-06b5fce81567.roa (raw, json)
Hash identifier:          kL1zkVosCq6NUOL0SiGOSaKTw5AxLUGXkrNmrtewIZU=
Subject key identifier:   6E:A5:84:82:C8:41:92:C4:9F:C0:7C:D6:7D:FA:48:D8:0C:AA:4D:34
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584A4110582082E716F46F28C680
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     30041
IP address blocks:        2607:9b00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:58:20:82:e7:16:f4:6f:28:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=94e37759-7125-4b74-836b-7cea1e9abaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:0f:71:6a:c7:77:37:d1:d6:65:e7:7e:e0:
                    27:8f:8b:84:72:2d:18:3b:97:c4:af:6c:1a:dd:37:
                    99:50:ce:84:d7:b5:de:1b:23:75:58:2d:50:0f:6d:
                    9d:49:ba:4d:9f:77:0a:6b:03:3d:85:98:b1:09:ca:
                    c5:eb:8d:91:61:79:26:e6:54:73:95:dd:8f:16:9b:
                    dd:db:31:4f:8d:87:44:60:6e:07:2e:cc:70:aa:fc:
                    d1:c4:cd:ed:9d:cb:61:13:7c:a7:a3:ef:f8:8a:88:
                    cf:e3:57:0a:48:b8:6a:ee:01:e4:c0:24:0f:b8:19:
                    0d:4b:d7:8d:a8:d7:33:c0:cd:18:46:41:70:a5:d8:
                    a5:9d:da:cd:53:16:c8:8d:b0:05:a0:82:53:9a:3f:
                    52:02:f1:bc:75:4d:1b:a8:93:82:de:7b:bf:7b:3c:
                    2c:26:60:8b:e1:fd:e0:ea:d4:84:8b:4d:16:72:c4:
                    cb:aa:ac:7b:96:bb:94:8e:8d:63:36:cf:d6:5e:7f:
                    12:5b:42:4e:95:4e:35:53:1b:08:f8:58:a5:d1:96:
                    57:54:af:8e:2b:bb:1a:d0:8b:81:1b:68:19:23:2a:
                    d2:45:c0:d8:1e:6e:de:f6:a9:c9:f5:21:0d:ef:b2:
                    04:67:5d:a8:9b:dc:09:6b:b9:14:15:67:65:21:4b:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:84:82:C8:41:92:C4:9F:C0:7C:D6:7D:FA:48:D8:0C:AA:4D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:57:d1:d5:f0:ae:04:82:b6:df:37:6e:14:6f:46:a2:c5:c2:
         f6:e6:33:57:de:de:2f:06:72:6a:d5:fe:a6:90:2f:e1:6b:ba:
         53:91:2d:63:b7:5a:2a:ea:88:23:0f:dc:35:05:29:9f:66:f1:
         eb:b2:e8:0f:53:a4:0b:b0:78:e6:b1:58:b1:f1:33:85:c4:bc:
         8e:d0:6e:e6:8c:3e:be:9d:75:50:9b:39:bc:de:f0:3d:1a:3c:
         e4:2e:41:15:db:b7:77:71:ca:01:77:f8:42:48:90:70:26:f4:
         f8:f7:44:9f:0a:0e:11:48:5e:96:b5:90:8c:d5:f3:1c:cf:34:
         e0:ad:ca:87:d9:dd:d1:83:a1:ee:70:fa:99:3c:2c:11:b9:01:
         cd:c0:ae:05:9c:b2:8c:8a:07:97:0f:cd:a3:84:f1:e6:35:77:
         a3:af:bf:12:19:6a:97:7f:ab:36:0c:fd:70:e6:fc:68:50:bf:
         2d:e0:87:a1:31:e3:9d:c4:7c:e2:cf:5a:e0:db:59:dd:c4:b9:
         24:37:14:4a:cd:5b:3e:e5:de:74:4d:81:0d:a8:f6:0b:7c:0d:
         de:cd:fd:51:4f:65:6c:09:e7:b2:b8:1b:bf:c7:26:93:7c:ef:
         c2:23:6a:85:94:98:8e:c6:3e:b4:e5:c5:a2:c9:83:86:f3:03:
         05:e0:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:30:39 2025 by rpki-client