Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
File:                     bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa (raw, json)
Hash identifier:          ol+/jVSZksL6g0KTWEwuikSxdE5hL8A2mlLjZgIOhLo=
Subject key identifier:   DC:23:9C:0A:8F:7A:13:12:53:6C:71:AE:A3:40:B3:FD:EE:D8:F1:CA
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584A2D85888572E07B72E43F11C0
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     30698
IP address blocks:        2606:e740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:88:85:72:e0:7b:72:e4:3f:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=ab7fcb74-676b-4f47-9095-9e1141d33407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:93:1b:04:fa:38:d9:8f:c4:cf:7c:83:5c:91:
                    14:09:a1:ff:cd:11:37:18:cf:42:89:8f:9e:28:47:
                    67:ef:e8:fc:ef:ba:80:d0:ef:ed:9d:80:c2:f9:c3:
                    5c:a1:f6:1b:f5:57:3b:d4:20:13:00:43:75:36:40:
                    c9:8a:39:ac:8c:ce:29:15:2c:f4:c5:ce:b2:d4:6a:
                    fe:d3:f1:f3:17:b4:4a:7f:ae:37:15:b6:3e:be:e5:
                    d5:1d:ce:9f:7e:3c:94:71:bb:72:c6:af:84:80:e4:
                    9b:ec:ed:97:c1:41:88:80:8b:30:8b:88:64:92:da:
                    74:d1:2c:92:3c:1c:d8:e4:d2:df:eb:45:2d:2d:5f:
                    6a:d0:3a:60:2d:9f:de:ee:be:07:97:f2:ff:93:d7:
                    32:57:5c:02:af:d2:88:50:69:3f:16:b0:42:01:85:
                    3e:ca:e7:5f:31:99:a0:f3:d0:8b:96:38:c9:58:be:
                    43:aa:31:4a:02:79:29:32:a5:25:de:75:7d:44:87:
                    60:93:de:da:71:a4:ed:aa:d6:b8:86:bd:c3:e7:13:
                    55:bb:e9:59:14:8d:d7:87:19:1d:9a:07:cf:51:a3:
                    6a:35:cc:68:bb:e2:a9:27:1e:4c:55:0e:9e:84:46:
                    36:55:95:4a:6e:07:f3:7e:6e:92:90:2b:30:7c:9f:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:9C:0A:8F:7A:13:12:53:6C:71:AE:A3:40:B3:FD:EE:D8:F1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:e3:d6:46:3d:ae:19:9f:de:65:6b:d4:13:9f:4e:fb:82:
         17:0b:06:58:6f:0c:3a:1f:24:33:c8:81:a1:58:2b:2a:21:2c:
         42:2c:2f:b9:aa:69:57:88:13:52:24:9a:44:46:3c:b7:0e:05:
         22:01:7f:01:ff:91:49:9b:1d:0b:c3:85:4a:3d:77:1e:8e:12:
         86:60:ba:2c:c6:26:bb:fa:1a:51:c0:eb:07:fd:8c:5a:d5:6c:
         bd:20:ab:c5:46:14:60:ce:6c:b8:b9:f9:a8:0e:0c:49:62:1b:
         ca:8d:9f:1f:de:a0:3a:8d:68:c3:be:04:2a:d7:27:7b:31:a1:
         7a:85:35:4f:27:13:ce:84:f8:35:5b:ae:77:ee:86:c1:00:5c:
         f3:a2:31:62:33:d4:1e:11:d4:26:9f:e6:42:d0:4f:24:00:83:
         a2:ef:c5:be:8e:36:82:6d:30:2e:b3:60:33:59:2b:b2:48:19:
         4a:52:57:08:98:09:8a:62:ec:7f:b4:d3:44:b9:b7:6c:79:2e:
         3a:9d:f5:fe:cd:3c:b5:bf:93:2d:15:26:4e:ac:5e:31:05:f5:
         7e:38:4d:af:41:3d:b3:9f:79:56:61:42:fa:a7:3c:32:94:76:
         ee:af:19:95:4b:91:d3:ad:cd:53:d8:8a:78:9b:0a:80:fd:62:
         21:6a:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:36:36 2025 by rpki-client