Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa
File:                     8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa (raw, json)
Hash identifier:          tMfdwztCb/+TNyqanFHpwh3/vsPqCJ6McC9iYgYggOg=
Subject key identifier:   1C:E0:04:96:89:08:30:9C:82:02:07:7B:3C:89:36:59:5E:EE:F0:D4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A3A15A6CD311C38766FDD1E00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     54113
IP address blocks:        2620:11a:c028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:a6:cd:31:1c:38:76:6f:dd:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=506e85b3-522b-498f-8125-b41365284396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:04:dd:8f:ee:eb:4c:09:22:0b:af:03:01:
                    3d:3a:df:1c:d7:0c:1f:a3:ca:f3:16:da:59:06:46:
                    7b:ee:5b:af:ab:66:6c:a0:60:38:69:09:55:b1:48:
                    2f:b6:87:95:5e:9a:4e:33:f4:03:b3:62:79:28:63:
                    c3:03:ca:a6:4a:56:5e:49:e9:cc:e6:4d:ea:d6:1e:
                    20:cc:94:bb:6e:a7:01:fc:57:d8:0d:dc:4e:58:bc:
                    0c:ff:9a:e5:15:1e:7d:5a:34:c2:37:06:78:bd:c5:
                    b4:d3:a7:7d:83:af:65:90:32:43:8f:f9:4f:4f:fb:
                    ef:52:d2:ff:80:8f:b3:87:57:90:ef:9c:5a:da:f6:
                    48:e3:d8:09:a9:61:16:cb:fa:35:5f:34:34:1c:98:
                    ab:ae:73:5f:1f:19:37:ba:0e:ce:71:d3:d5:61:8a:
                    eb:76:1d:da:7c:86:fb:00:d2:a2:5a:4b:94:5f:08:
                    f4:97:58:95:db:0a:ac:7f:f5:7f:3d:1a:23:72:3e:
                    14:be:d4:db:f1:7a:c0:f5:f8:e4:35:1e:d9:b2:ed:
                    72:b0:df:4b:15:b6:d7:02:42:d4:20:c8:c5:6f:b9:
                    9c:78:51:ab:8a:73:53:e3:7e:6f:d9:26:07:86:b1:
                    91:31:5c:0b:2d:42:34:a1:8b:aa:8c:12:28:c2:67:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E0:04:96:89:08:30:9C:82:02:07:7B:3C:89:36:59:5E:EE:F0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:86:be:67:32:98:1c:dd:22:86:40:cb:11:37:89:6d:68:74:
         0a:70:d6:e9:65:ca:e5:ea:aa:bc:7d:89:89:09:40:43:91:5d:
         90:42:40:29:04:83:5f:f2:86:cb:f2:ca:29:a9:25:d5:2c:06:
         5c:ba:14:d6:81:e0:ff:fe:6e:4a:6b:fb:03:b7:e1:dd:d2:c7:
         e2:07:88:ff:74:a4:3b:ce:72:0a:88:b7:bd:77:3c:1a:61:ef:
         30:c8:d6:2c:3a:02:7e:5a:aa:db:53:be:4a:62:42:5c:16:68:
         2a:48:00:e8:ae:64:fb:93:6b:cc:6a:49:fd:d9:9e:69:bb:fa:
         91:0a:55:7d:af:4a:17:f9:83:07:19:23:91:05:50:5d:6e:be:
         e2:82:be:de:77:34:ff:6e:bc:49:40:aa:4d:69:b0:af:7e:26:
         67:a7:f0:6a:7a:7e:13:36:03:d5:5f:04:18:8a:2d:1e:bb:be:
         43:58:d8:26:04:2f:70:fe:88:dd:58:73:f1:fd:87:d0:5c:82:
         d1:72:e4:24:4f:0d:e4:c8:1b:fe:78:b9:69:73:b6:70:eb:36:
         ec:3b:24:e3:c1:0a:17:ff:3f:0b:b4:e3:e6:a7:01:1e:ea:24:
         58:8d:79:7f:da:d8:63:aa:10:69:5e:ff:5e:b1:40:5d:7e:91:
         d7:33:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:17:52 2025 by rpki-client