Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa
File:                     1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa (raw, json)
Hash identifier:          z+EIBfsxTYQGb8AjSrid8inHeClxgQJWu7UnKW8SzXE=
Subject key identifier:   6E:3A:30:15:B3:DA:5D:FC:AB:CA:C3:2F:F5:16:64:D1:60:B5:5F:97
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584A3B7B00EAFB8325CB9C35CF00
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     14618
IP address blocks:        2620:c1:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:00:ea:fb:83:25:cb:9c:35:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=5447c948-1c14-4533-8027-c6e12a563969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:4e:a8:24:f2:9b:95:96:f6:a9:c5:d4:93:
                    f0:d7:55:37:46:0c:38:40:96:82:b5:3f:c0:11:c7:
                    9e:87:00:20:e4:96:85:e4:67:6b:02:8d:5d:b1:45:
                    69:e4:b7:f5:33:89:89:e1:5a:9e:87:bb:d1:bf:2f:
                    87:18:79:17:4e:46:91:64:df:f9:1d:dc:cf:ce:24:
                    11:83:92:a3:a5:6c:c5:d9:84:3f:cf:e6:31:e3:a8:
                    db:0e:28:a6:82:ed:cb:5b:05:e0:bd:a7:d5:d2:da:
                    10:bd:de:76:5b:fc:8a:1d:8f:4e:a2:f0:05:b9:8e:
                    70:6f:98:4f:97:ed:d4:fc:da:0a:59:71:be:96:10:
                    fc:e7:e0:32:06:06:20:20:e3:40:a4:ee:cb:c0:de:
                    51:50:a3:aa:77:12:ce:6a:55:28:85:bf:a3:69:35:
                    6b:28:f2:fe:9c:57:8f:76:27:a4:a3:9e:21:73:c1:
                    f4:4d:e4:df:5f:98:6e:ea:d1:c4:72:bb:fd:78:a2:
                    f8:3c:58:7a:62:e5:0d:c2:9f:59:f1:9a:9a:79:8e:
                    04:8d:37:e5:9d:63:91:24:00:d6:3e:4a:16:3a:cc:
                    1d:cf:5d:41:e2:b1:0c:ea:fa:d0:36:e0:50:4f:57:
                    b1:8e:08:28:be:ea:72:a5:9e:58:d0:06:b4:69:3c:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:30:15:B3:DA:5D:FC:AB:CA:C3:2F:F5:16:64:D1:60:B5:5F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:e5:4a:5b:2c:ee:6d:95:7c:0b:db:96:5a:0d:4d:ea:4f:
         0d:a9:b3:84:83:3b:e6:63:d8:4f:4c:57:a1:60:77:d1:e1:a3:
         cb:2e:26:03:e9:39:87:58:82:89:53:11:3a:56:5f:d8:6f:64:
         03:07:35:6d:63:15:73:44:b9:a0:26:86:ac:65:aa:32:45:5b:
         a7:63:1f:2c:92:38:3f:9d:78:7f:eb:4d:67:be:24:95:31:83:
         90:69:22:90:77:6d:f4:48:13:7a:7d:17:8d:3c:bc:35:b5:ac:
         6a:96:aa:b0:18:bc:c9:a6:14:4d:99:c2:d4:9a:ed:bb:87:f1:
         20:62:53:eb:ed:2a:ae:e0:30:c3:db:ce:95:c3:b8:57:3a:55:
         fc:89:52:6f:81:e4:6b:16:d3:dd:d6:7d:a3:a3:01:84:82:2e:
         34:1e:f0:4d:4d:db:57:c3:d3:f9:9d:96:8f:3f:e7:8e:b8:27:
         44:7e:df:0c:c6:93:3f:38:e3:7e:ee:9f:1b:0f:ce:98:c8:22:
         01:f9:2d:e9:d5:88:0e:21:0f:8b:0f:59:a8:e5:c4:19:7b:60:
         1c:55:6f:f2:c7:fc:6c:f2:d1:45:54:f4:70:73:40:8e:5f:71:
         4e:ec:14:48:fa:5b:06:78:e8:d7:54:bd:b7:db:d1:84:9a:47:
         39:ba:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:33:42 2025 by rpki-client