Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/47ab4937-930b-3649-9552-2de778c61703.roa
File:                     47ab4937-930b-3649-9552-2de778c61703.roa (raw, json)
Hash identifier:          wZrBXl/ni+3Y67Om6xrDkaCb25eXTIAmfD66yr1G1zc=
Subject key identifier:   C6:7C:95:AD:65:0E:E6:31:05:58:95:EA:6F:5A:5E:BE:FB:0A:21:CE
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285849EA851F1484062730BE994880
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/47ab4937-930b-3649-9552-2de778c61703.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     396982
IP address blocks:        2620:1b2:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1f:14:84:06:27:30:be:99:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=a1f43ffc-9f8d-47f7-8409-7620253f3440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:c8:65:4b:20:e5:a3:e1:9e:f9:1b:36:53:
                    06:a0:02:44:35:85:21:b9:7c:dd:1b:df:fc:30:29:
                    91:e7:f8:43:92:84:ce:e1:17:ad:f0:ab:a6:e1:0c:
                    e5:bd:c4:ef:3b:54:62:21:97:e3:68:54:ba:4a:7b:
                    44:d7:bb:00:de:d7:9c:c0:41:9b:90:19:fc:ca:38:
                    97:49:6a:38:e9:e0:f4:88:be:65:7a:ff:09:ce:e4:
                    3a:ee:66:df:2b:09:4d:02:67:58:1b:50:18:48:26:
                    b0:fd:3d:9a:0a:4f:64:b4:c6:c3:ee:7f:b5:25:ef:
                    f3:4f:ce:60:1f:1b:04:41:41:3b:2a:9e:79:23:6a:
                    dd:a2:87:d3:1c:d7:dd:f0:e9:b8:d1:d9:9b:7b:d0:
                    1c:66:6b:ae:63:6e:02:5a:01:35:04:8a:cd:e2:ce:
                    a5:f8:c0:6e:1e:3e:62:ef:bc:5e:fc:66:93:7b:f7:
                    d6:25:cc:9d:8d:de:af:3c:40:41:19:98:57:c7:8d:
                    65:86:82:6f:18:59:90:e4:87:2f:2c:12:8b:1b:41:
                    49:ae:08:10:69:1f:6e:8a:99:d7:af:fe:60:04:b0:
                    6f:93:05:43:6e:a4:ec:eb:8d:d0:24:63:32:2c:2e:
                    4f:6f:d4:48:84:fd:3d:bb:14:5b:43:9a:60:f6:3b:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:95:AD:65:0E:E6:31:05:58:95:EA:6F:5A:5E:BE:FB:0A:21:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/47ab4937-930b-3649-9552-2de778c61703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:2c:3e:bb:2f:16:24:1b:23:e7:6a:ad:d7:6e:29:1c:e6:
         1c:40:ec:0c:1e:74:97:07:c2:8a:26:08:c3:25:16:4c:26:a8:
         92:2d:b3:4e:81:ad:cb:55:1f:20:6c:55:63:69:79:a5:94:71:
         ef:c0:42:2a:87:2a:a8:86:3c:52:7c:c2:45:af:e0:4a:19:9e:
         16:3f:a0:0d:a1:72:92:c6:b6:54:92:9a:77:af:2c:c9:b0:f2:
         46:35:17:a5:59:cf:45:ca:13:46:c2:dc:a1:ff:cb:df:80:a2:
         2d:f3:84:47:e6:93:6b:cf:fa:dc:8c:d3:00:e4:e5:c6:e6:86:
         92:86:1b:29:c0:af:72:d6:8a:f9:0d:71:f1:4a:5b:79:03:33:
         45:f5:21:c5:a5:e1:2e:7d:97:69:80:a2:a2:7b:ea:ee:89:b7:
         9d:b4:9b:90:53:9a:52:4c:ed:00:bd:8e:68:89:eb:7f:ee:2e:
         c5:87:f8:5b:2c:76:fa:77:4e:73:76:3d:7a:eb:5c:12:89:da:
         e5:11:07:83:66:09:a0:7f:94:6b:dd:e6:62:37:90:e4:7a:0a:
         5b:ea:f5:63:06:b1:4a:8c:2a:b2:ff:36:c3:fa:74:03:f3:11:
         0e:89:00:7e:1f:f3:f4:39:f6:f4:59:9a:23:d6:4d:41:35:e1:
         c2:94:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:43:53 2025 by rpki-client