Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa
File:                     973626d9-0e99-3f45-9b74-9ab73137723b.roa (raw, json)
Hash identifier:          OMLwrYyIq8m5WIL7gZGrhY87uRhi6mJYteB6Z+1fSu8=
Subject key identifier:   BB:E6:B6:23:BB:E5:25:7A:22:61:A9:32:B7:E4:4E:59:00:D4:33:83
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285849E22528AD26427947DF7ED5C0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11269
IP address blocks:        2605:e80::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:28:ad:26:42:79:47:df:7e:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=eb6232b0-a224-41da-8f5e-d4709102f164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:ff:bd:64:38:3e:6a:8e:86:0b:91:6a:c1:
                    85:4e:f7:a4:72:91:42:a1:40:dc:02:4f:5d:48:cc:
                    5d:ec:fe:eb:5e:9a:3a:a2:f4:b3:d4:52:95:f0:d8:
                    d3:33:3f:dc:94:61:ba:e0:d9:f6:65:af:56:c2:4b:
                    10:48:0c:90:48:c0:43:05:88:76:af:02:a6:5e:83:
                    57:20:69:99:03:7f:72:eb:74:7a:63:4c:c4:57:6b:
                    40:7b:a6:95:92:d2:9e:ac:c4:47:28:d0:f7:f7:5a:
                    dc:29:af:4e:2d:b1:62:76:4b:fa:93:37:7b:e0:f4:
                    b9:9a:cd:74:c9:f9:ab:fd:fd:7d:6b:37:34:e0:d0:
                    eb:e2:9a:b3:f0:4f:c4:87:17:7c:e0:a5:d3:5c:d1:
                    91:06:44:80:14:0e:94:2e:b8:d3:41:92:17:0b:37:
                    f4:33:40:a3:0a:2d:53:b8:4d:b1:a9:22:f6:da:25:
                    8b:8a:ed:ad:eb:8f:e6:89:51:fa:bc:2c:13:11:35:
                    72:07:f3:11:a5:66:90:3c:fb:a1:92:2c:d7:7e:75:
                    1c:91:69:48:fd:22:82:2c:64:e5:06:13:ee:13:39:
                    52:2b:b6:d4:c5:cf:48:36:40:1a:39:75:83:d7:3f:
                    ec:83:c4:15:0d:c4:ad:63:e0:5f:ed:68:6a:c2:3e:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:B6:23:BB:E5:25:7A:22:61:A9:32:B7:E4:4E:59:00:D4:33:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:38:a0:c8:8c:4c:0b:ef:62:03:5d:ab:d9:14:21:79:ad:75:
         b7:b9:fe:7f:32:a3:6d:8b:9a:85:43:e3:42:36:14:f5:60:dc:
         f6:ec:ae:3b:df:41:b6:90:01:44:bf:ad:d0:f6:dc:2c:69:97:
         5a:9a:89:1f:e6:1d:7b:b9:2f:4b:76:c0:17:42:54:b8:c5:36:
         83:a7:42:83:b8:c2:cc:5a:cf:70:2a:64:6c:88:c6:00:ae:42:
         a6:0b:d0:2c:6e:67:1e:4a:b1:bd:cf:e9:4c:b3:eb:ee:d6:75:
         4e:36:cd:47:a0:3e:70:5b:b8:d2:47:be:7f:89:7b:e8:75:9c:
         e4:6d:2e:56:a7:d0:ac:b1:37:ec:82:91:e8:43:63:6a:f2:0d:
         83:34:e3:18:cb:fa:ee:1f:6a:1f:af:ac:d0:81:a1:b4:4f:8c:
         0e:f1:e5:d4:18:f5:ba:d4:40:f4:5a:2f:91:41:ca:dd:69:36:
         21:bd:b3:29:25:db:c0:de:ff:74:d4:f7:aa:11:fc:54:3e:e8:
         35:ea:68:03:fc:23:78:e5:76:47:cf:20:2e:47:d8:7d:74:1d:
         fa:82:c4:88:4f:80:4b:bc:2a:79:b1:5f:40:f0:a7:41:5e:8a:
         f2:0a:fb:8e:f1:1b:32:f5:2f:df:83:82:ac:bd:48:6e:90:af:
         23:85:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:21:18 2025 by rpki-client