Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
File:                     bc426fed-fada-323e-8db0-afd0fab751de.roa (raw, json)
Hash identifier:          8PMELp1ab2hJuV5ifAHjiRiYx9PeeQX8U7XZd94S+Q8=
Subject key identifier:   42:A2:97:3F:29:58:F4:DB:B8:C9:3A:90:22:30:10:3B:7C:E8:80:BF
Certificate issuer:       /CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
Certificate serial:       010D0C9F4328584A268AC4750A672D7EB66C0770
Authority key identifier: AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36666
IP address blocks:        2620:c1:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c4:75:0a:67:2d:7e:b6:6c:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=7e71937b-9391-4a68-9c32-0ba24d8ab183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:4d:84:ef:d0:cd:35:2d:f5:1c:9a:f1:ad:
                    82:0b:ee:4b:9a:97:46:3e:19:63:4a:05:37:4a:4f:
                    ed:d6:ab:40:d6:bc:9a:69:2e:63:ce:93:8a:e2:5f:
                    c5:c6:b2:18:50:a4:63:4e:6d:5b:3e:a6:ce:c6:99:
                    dc:85:b4:73:c1:a7:0b:11:a6:f2:ab:21:12:32:e6:
                    a1:92:c9:66:87:29:0c:07:81:45:62:49:93:52:b1:
                    d1:e1:94:36:32:fa:ba:da:a0:e7:ef:22:84:b8:f1:
                    86:9d:ed:f2:61:c4:67:e4:03:b3:ff:64:66:f4:d0:
                    e2:ed:8f:60:43:c8:b7:8a:bf:40:c6:4f:45:42:60:
                    3e:cb:a3:8e:94:7b:03:d3:a4:ae:22:a2:1e:2c:09:
                    19:11:28:a8:7b:11:3b:92:8b:09:31:ba:8e:88:dd:
                    c2:27:ba:21:00:fc:74:c6:e3:da:3f:a9:19:43:ec:
                    6f:6d:14:24:04:15:b3:47:63:c1:5b:fb:19:b3:f0:
                    d9:06:76:9d:c3:dc:d3:f8:24:48:b8:6c:30:85:a2:
                    51:6c:d7:56:ab:ae:9b:d0:c0:92:c6:70:92:93:a5:
                    c9:99:f0:90:0e:38:14:96:ee:17:74:94:f4:bd:f0:
                    5d:60:bf:22:b1:45:26:a9:e3:4d:f8:8c:08:68:de:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A2:97:3F:29:58:F4:DB:B8:C9:3A:90:22:30:10:3B:7C:E8:80:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl

            X509v3 Authority Key Identifier:
                keyid:AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:ac:4e:69:19:ed:72:44:62:b9:37:c0:8e:eb:b6:60:cc:
         50:c3:9e:47:4f:33:8b:28:c9:03:fc:bd:b1:47:ea:02:48:91:
         63:ad:1c:5c:4a:c6:b9:f8:8d:37:c6:bf:36:7d:71:da:ce:87:
         f7:61:cd:aa:99:82:e5:32:83:52:10:21:c2:4d:65:07:dd:f9:
         f4:db:e6:2f:93:ab:88:bf:19:c0:d0:e4:24:25:01:30:c0:fb:
         6a:7f:4d:9d:3d:8c:7c:3c:1a:21:6a:ae:b0:d1:ea:67:bf:de:
         5c:11:11:65:ba:ed:f2:97:5c:e4:80:8b:c7:49:ce:31:61:e2:
         e8:d5:c0:bf:03:db:31:b3:d0:e3:3e:ed:bb:d3:ed:f9:ff:96:
         df:d9:c7:88:de:f7:21:ab:db:66:6f:c6:2e:6f:a2:56:e0:86:
         40:b2:8a:59:1d:2f:86:8f:09:58:6d:04:5b:e2:70:7a:17:93:
         7a:77:63:c8:ae:e2:42:fa:19:17:02:a2:5f:4a:1e:13:ba:f5:
         38:18:15:6a:89:08:79:9c:c1:c0:a9:f4:02:7e:74:be:fb:0b:
         64:8c:20:0d:45:8e:e7:f8:1f:70:11:31:4a:f8:a2:73:05:c5:
         17:37:7d:01:81:6f:dc:da:6b:26:a6:60:d9:6c:57:fe:d7:9a:
         d8:b0:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:34:38 2025 by rpki-client