Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa
File:                     6e2141ca-fde0-3351-bf14-bf9318855b01.roa (raw, json)
Hash identifier:          AgPWm/2Tk7jq0/L/IU/llq9Kp0Cv0W30C9iREr8MugI=
Subject key identifier:   99:4C:3C:D6:32:35:BB:83:18:6B:3F:BD:78:DA:A6:8A:2D:8A:CF:31
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285849E225198A3A0F8621A3F54E00
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     22799
IP address blocks:        2607:a000::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:19:8a:3a:0f:86:21:a3:f5:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=ca21a061-0a91-44e6-b9f0-99c997d14dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:9e:b1:b6:84:cc:44:0f:79:a7:29:1a:1b:
                    9f:99:3f:70:1c:6c:9e:8b:d3:b1:32:f3:fa:0b:0a:
                    dc:ea:d5:c7:07:fb:b2:a4:f6:36:3c:6a:94:d6:d9:
                    66:9d:cb:da:a6:fe:d3:0a:2e:c5:d4:29:e3:4b:95:
                    6c:60:9e:a3:89:0e:90:51:38:6c:e5:fd:4a:2e:30:
                    71:e1:43:76:c2:26:0a:ac:dd:84:a3:d3:ed:6c:f0:
                    29:6c:82:53:83:1c:c0:4d:47:52:06:26:39:7c:38:
                    81:bf:51:15:76:e9:e4:01:fc:ea:a7:6a:5b:a5:45:
                    c8:12:f4:dc:4f:5c:c3:61:14:6a:10:a3:18:8c:98:
                    16:fa:a3:63:5e:16:92:ce:fd:04:8d:3c:f8:86:7d:
                    6d:47:92:07:ae:66:3f:58:da:ef:65:d5:47:d1:42:
                    f7:c8:d9:ce:fb:ac:72:45:d5:65:3a:6b:71:ba:bc:
                    44:90:08:bc:cb:1f:37:8e:3b:76:fb:55:98:9a:5a:
                    d7:47:b3:dc:c4:52:94:0e:3f:3f:be:57:0d:99:db:
                    62:2d:7e:8c:7f:56:26:56:62:3a:ff:84:fe:14:9a:
                    42:11:51:0a:44:55:79:65:9b:f4:11:8c:83:06:7e:
                    09:4c:ca:86:75:48:7d:d0:84:6b:85:bb:e3:0c:60:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4C:3C:D6:32:35:BB:83:18:6B:3F:BD:78:DA:A6:8A:2D:8A:CF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:68:3f:a0:9c:11:73:36:46:c9:00:e5:05:58:a3:b7:38:a6:
         c5:6f:0f:b0:83:05:10:d9:f0:e2:01:e3:d5:ca:29:ca:87:7a:
         71:c2:5e:45:19:69:4f:5f:a7:8f:42:ef:80:7c:4c:27:55:5a:
         69:3f:3d:3e:8d:1b:2e:75:ce:97:c7:cc:32:82:3b:d4:ec:c0:
         b5:14:52:bd:20:12:91:d3:27:ca:26:41:86:0e:ba:d0:3b:0f:
         39:56:7a:41:99:ef:8a:5b:db:7c:07:74:b4:85:b2:60:d6:ff:
         c3:85:62:62:6f:df:12:18:43:96:fe:f0:34:04:bc:c6:d0:06:
         03:c5:e5:ec:f3:47:c2:71:08:8d:99:a9:13:57:ed:7d:ff:d8:
         4b:86:8c:6b:99:bd:12:a9:59:c5:96:7e:4c:64:70:5b:9f:ca:
         72:55:b3:83:02:2c:61:0b:d9:23:1e:ad:14:a2:e5:41:81:90:
         76:41:3c:7d:54:a7:4b:75:d2:eb:ca:a4:59:86:60:00:04:3a:
         59:28:b6:a6:69:e3:61:a4:6b:9f:fb:07:15:22:65:5a:6a:f0:
         e5:17:72:7e:9b:56:77:53:f7:0c:9b:38:8f:52:dc:2f:21:b2:
         1a:9b:2e:70:2b:33:91:83:1d:a8:0c:85:11:ca:78:9d:3e:2c:
         d8:f7:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:40:36 2025 by rpki-client