Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
File:                     aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa (raw, json)
Hash identifier:          5NLeXB3Kc2aSCjPbBXCq6Rh5Rv8IoPVOCpvOSSqkK7o=
Subject key identifier:   72:2B:F3:16:80:D7:0B:E5:E9:A2:8A:29:D4:FA:9C:B1:B3:EB:80:B0
Certificate issuer:       /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial:       010D0C9F4328584A549B1BC3113216F0A42A91A0
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        2606:cd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1b:c3:11:32:16:f0:a4:2a:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=1f20717f-af82-49dd-96ca-b244c2a8f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:40:99:6b:e2:36:19:89:e6:53:20:97:70:
                    9b:39:40:18:12:45:07:d9:b2:a3:fa:6c:bf:1d:fc:
                    a4:88:8d:52:d2:55:60:65:dc:4a:9e:33:74:57:2b:
                    9f:21:a6:a9:86:bb:44:a5:ee:c9:9e:b0:bb:57:21:
                    eb:5f:7d:a8:87:85:d6:cf:18:69:1e:79:c7:02:a2:
                    d1:3d:4c:93:f1:31:d0:36:a6:cb:e9:5e:a9:27:c5:
                    32:6b:fd:7e:60:3a:a9:23:99:46:ea:e3:3e:7e:1a:
                    65:df:02:e8:e1:b7:a7:78:3d:b1:37:ac:67:c6:eb:
                    20:83:b2:25:9d:42:56:01:a5:1a:47:c1:07:17:fc:
                    38:80:5a:92:b2:5d:a9:c7:f8:5e:fd:35:a1:9c:06:
                    fb:b8:71:a8:21:e5:eb:07:c6:ab:c8:80:a6:75:13:
                    af:f7:76:04:95:ce:af:fb:50:68:58:41:79:c9:a0:
                    37:1e:c5:18:db:96:71:07:d2:2e:c9:22:c8:0e:38:
                    84:77:4c:f4:71:cb:38:23:81:2e:7d:6f:73:8d:5a:
                    0e:05:ab:2c:2a:15:b5:31:39:fa:f1:7d:24:78:01:
                    d1:70:d1:13:51:69:e6:fa:06:a7:a1:08:e4:29:7f:
                    b9:8b:25:a2:63:7f:15:92:6b:52:7a:15:13:b7:46:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2B:F3:16:80:D7:0B:E5:E9:A2:8A:29:D4:FA:9C:B1:B3:EB:80:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/aba7e906-6e7c-3ebe-bca7-ee0ba46a653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl

            X509v3 Authority Key Identifier:
                keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:97:52:43:c1:42:b5:1b:7b:e8:09:74:57:0b:90:20:51:
         17:fb:14:12:17:40:91:46:ce:f8:c9:25:2c:e2:c1:29:b8:db:
         29:52:ae:d8:64:6d:c3:e3:b6:5b:7b:d3:4c:22:96:52:ed:f7:
         4c:8a:35:c3:1c:e8:b4:80:08:02:0c:d6:1c:21:01:8a:35:87:
         72:70:72:c4:29:3e:6c:29:98:68:23:82:cf:d9:ec:a9:5d:69:
         8d:30:c0:e8:53:83:22:67:ac:02:e6:ff:84:4b:a2:c8:9b:47:
         7e:08:d1:ec:d0:e9:9d:6d:2e:b3:0c:3b:b1:80:9e:4f:6f:d6:
         de:86:97:33:61:11:35:35:28:a3:d1:03:a3:6a:36:f1:4a:c4:
         66:a0:9d:41:ca:b9:3d:3e:1e:f7:d5:f7:08:be:16:b2:2a:41:
         e9:47:66:f7:fd:c1:a6:03:81:4f:0b:2a:35:0f:f3:2b:7c:6e:
         db:a7:3b:7e:fc:b6:33:8c:a9:12:32:f0:82:6f:7c:f2:18:e7:
         0f:57:a9:e4:b6:eb:a7:bc:c5:95:3c:c8:2e:b0:fa:e3:b8:b7:
         31:58:35:d3:e5:a3:3f:90:0c:62:8b:65:7e:12:f2:94:5a:e1:
         c6:67:9f:96:ae:56:95:57:b1:16:27:e0:1f:e8:86:79:77:14:
         85:bb:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:19:19 2025 by rpki-client