Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa
File:                     ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa (raw, json)
Hash identifier:          6R0XQE4vPYDrsTYNlwLnWqFyzDFdgpBZcrl4pRrRaak=
Subject key identifier:   22:75:B0:3D:06:32:54:9B:CD:B7:B6:3A:6E:49:D9:C0:1F:1D:EF:40
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAEEA22C4037EF34442D00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        2607:f060::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ee:a2:2c:40:37:ef:34:44:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=5feb5248-2473-4e64-94b8-37daa3f3d540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:21:d4:54:d9:d4:94:34:cd:5c:8d:b1:0a:
                    ca:6d:e9:98:c4:f9:b1:f8:54:e7:8a:8a:61:23:40:
                    90:25:a1:1d:7a:27:a9:3d:7f:d2:19:48:4d:9f:1a:
                    a3:ca:ff:ef:1d:93:db:01:95:82:75:61:6a:db:a4:
                    66:28:ae:4e:a9:78:33:a7:8d:5d:b9:b2:3f:c6:4c:
                    c7:0d:2c:45:f0:11:73:69:fc:7c:8a:1d:95:a5:83:
                    0b:38:ef:ae:eb:3a:aa:68:00:59:a3:0c:e1:78:b5:
                    38:73:94:4f:b3:59:a1:a4:e3:82:ce:ee:cf:67:6e:
                    d9:8c:60:ec:df:07:87:8b:ea:c8:84:ae:2a:82:7c:
                    4a:e2:18:9b:ba:5f:e2:7f:43:df:d4:3f:68:c2:49:
                    44:20:98:3d:d6:4f:d3:a1:4d:57:b8:12:94:0f:18:
                    81:5f:2a:ec:98:25:d2:d2:41:79:c3:a8:4e:0d:96:
                    ca:e8:e6:be:e2:1d:39:96:dc:14:d8:2e:6e:93:ff:
                    73:35:ec:84:b2:ed:58:97:db:6d:4e:ab:99:28:d1:
                    ce:97:f1:17:ee:d4:7b:2f:91:fa:01:01:3a:eb:8e:
                    bd:c0:d2:35:db:76:e9:e9:ca:c3:b5:46:89:e8:83:
                    9a:50:37:74:ce:84:ba:f1:d3:8a:10:77:42:b7:9f:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:75:B0:3D:06:32:54:9B:CD:B7:B6:3A:6E:49:D9:C0:1F:1D:EF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:e2:7c:c4:1e:5f:a6:fa:c9:b9:f1:91:99:67:46:92:85:
         68:b9:45:9a:89:63:b8:b6:9c:0b:5f:a3:0f:22:ac:b8:d7:f3:
         4f:5f:b1:59:f4:8e:17:ce:1c:37:55:c6:c1:2f:fe:e6:e4:83:
         b3:fd:2d:33:8f:10:c1:21:11:cd:7e:dc:ac:43:14:90:1b:a6:
         f4:06:79:7a:48:4b:57:26:8e:13:98:05:c4:e5:08:eb:c5:db:
         b1:98:15:43:2a:57:7f:a7:c0:56:ed:c9:c6:ff:41:e8:63:90:
         af:a3:ec:81:90:10:7c:72:b3:05:61:bd:86:b7:74:67:1d:b7:
         e8:d4:7f:3d:99:9c:e6:19:9e:70:a2:bb:6f:73:be:4a:e9:f9:
         72:bf:46:a3:84:df:5c:7b:20:7a:d1:77:73:c8:a3:2c:25:a7:
         fb:2c:f8:84:82:95:07:51:bd:eb:5a:ec:82:96:2a:da:ef:c5:
         9c:ce:4d:f9:58:fb:48:63:8e:86:9f:0a:1d:0a:f9:68:65:08:
         0b:04:a4:b1:6d:cc:5d:3c:b5:de:d0:b4:c3:10:54:67:fb:f2:
         d8:f3:3d:54:9f:96:45:79:41:dd:a2:e3:d3:50:48:65:ba:ed:
         cc:71:6f:16:75:c5:43:4b:40:99:74:67:9e:c4:85:f3:ea:15:
         3e:aa:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:58:01 2025 by rpki-client