Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          pbm6KRLzL4QroMijurLpmHmhupGMGwAQAETPImh9tfM=
Subject key identifier:   EA:0C:5C:D5:71:DD:D9:36:B3:80:51:61:A1:D6:A9:1E:B9:A5:CF:BC
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584A4DA04281E693D32B48CBF600
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:42:81:e6:93:d3:2b:48:cb:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=6b9e1c02-2e22-4edd-a2d8-ad18e35d1056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:a5:b2:63:8a:35:1c:39:8f:93:48:47:7f:
                    e3:2c:e1:7b:dd:10:01:2a:7b:a8:67:63:8b:f8:f2:
                    68:ca:97:47:3b:5b:2e:ad:49:c8:22:95:e4:d5:49:
                    e4:c9:ca:03:31:2f:e8:94:b3:1f:b0:8e:61:4a:fb:
                    48:af:2d:91:f7:39:28:c5:c1:4a:de:b7:eb:e5:1d:
                    20:ee:19:ee:28:29:4d:26:88:8c:83:7f:64:08:e7:
                    2c:e4:e9:0a:9d:cd:8e:08:f2:48:f9:f8:82:cc:15:
                    88:07:10:c4:a7:e3:c8:99:f8:bb:b6:dc:b4:84:3a:
                    23:bf:3d:fe:55:43:22:68:38:70:c5:33:6e:eb:63:
                    f0:ad:8f:a7:49:f7:93:33:fa:89:87:7b:7d:aa:ae:
                    58:13:0c:eb:7e:e4:12:38:2f:0d:99:dd:7d:60:36:
                    00:51:fe:b4:b2:f9:96:16:7b:11:87:88:be:76:6e:
                    e2:ce:cd:35:40:58:b3:11:d3:f5:19:d7:3f:7d:8e:
                    12:61:06:61:c5:df:e7:0e:00:e7:39:8f:26:7a:56:
                    03:16:a8:1e:67:66:2a:32:f5:58:11:d0:4a:cf:ef:
                    5e:c4:66:10:10:48:6b:7c:ef:76:02:2e:54:64:4c:
                    0b:49:1a:4e:36:72:df:6f:b1:fb:30:7f:ca:60:95:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:5C:D5:71:DD:D9:36:B3:80:51:61:A1:D6:A9:1E:B9:A5:CF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:1f:0b:9d:d4:96:5a:a1:b9:97:5e:2a:58:35:31:8c:6a:
         bc:c7:4a:3a:09:9a:52:44:d8:ab:32:15:8d:e1:2f:5a:ee:4e:
         01:1e:89:77:15:35:81:ce:f2:8c:2e:30:03:8a:41:9e:65:72:
         1f:95:9a:ee:dd:c8:59:0f:a1:1d:e8:d6:7a:be:9e:5d:e3:44:
         b4:12:ad:67:6f:86:5c:44:fd:f0:2b:b2:ec:df:2d:46:f6:a6:
         fc:da:83:79:08:03:61:b4:f4:c7:9c:84:6c:cd:6d:6c:9b:36:
         ab:ef:89:27:50:cc:f4:35:8d:d2:78:ea:b7:e6:3b:ac:0d:2a:
         b2:49:2d:c4:3f:5c:8d:a4:01:2e:b6:cf:30:71:38:d6:ce:d4:
         82:24:ff:49:59:4b:a7:22:94:fa:5e:26:cc:b5:32:34:0e:de:
         1a:e8:42:10:3d:bc:e1:c1:d7:f9:b7:e9:3e:96:76:ef:0f:27:
         3f:00:8e:c0:ff:a1:f6:ff:a1:c5:21:5d:ca:3d:fb:28:cb:3b:
         f2:45:73:bd:39:d0:3f:6e:da:08:3b:3d:f2:de:c3:01:fe:0e:
         c7:e4:59:4f:18:6f:51:a9:74:00:f8:a7:ea:8a:67:e6:ed:77:
         92:17:af:26:a2:35:c6:06:e1:76:08:65:64:8c:09:12:8b:c2:
         e6:c6:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:56:18 2025 by rpki-client