Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
File:                     41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa (raw, json)
Hash identifier:          mbdX/SBb9oNMhupuTx73aW5bhUNLAnJw46jkeiVV3qI=
Subject key identifier:   BD:BF:8E:B4:F7:80:95:F1:B5:07:76:B2:BE:6F:F1:4F:DC:BB:0B:72
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584A5A306DDD18EE2A94B0EAAC00
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     211977
IP address blocks:        2607:eb40:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:6d:dd:18:ee:2a:94:b0:ea:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=c11b8eb1-577f-4c78-ac77-4cab1d22c19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:dd:aa:96:15:e6:e0:4f:08:06:2d:4b:bf:
                    89:3e:1c:98:21:72:9a:ac:79:7c:f7:94:23:23:ca:
                    8b:14:67:b9:d5:2d:8a:ce:c7:d4:2a:8e:0c:46:3d:
                    ea:bd:81:e5:77:21:18:f5:1b:62:46:42:19:f8:7f:
                    7a:b2:25:94:b2:21:a8:a0:44:70:1b:d0:f3:d5:a8:
                    74:f2:a2:00:c1:ad:96:ee:6e:14:ee:6f:17:5f:a3:
                    66:db:ab:79:a5:d2:aa:a9:36:af:b1:25:f5:e2:48:
                    cc:59:89:9e:40:5a:84:72:83:25:54:c7:ad:87:7c:
                    32:55:1a:78:b8:79:34:53:3b:80:b3:f4:6e:7a:41:
                    eb:f2:36:25:34:e8:97:d9:41:f5:02:ab:96:68:08:
                    ed:15:49:d7:9e:a7:37:c6:82:7c:52:6f:d7:88:53:
                    74:5d:0b:66:10:b5:18:bf:a8:8c:63:c3:a1:1c:9f:
                    24:a9:d1:e2:46:5f:7a:6f:9b:cc:2b:cb:a4:7a:07:
                    ca:43:3e:a5:dc:0d:2f:40:09:89:7e:c4:14:72:e3:
                    17:2c:fa:62:b6:fb:22:00:78:f6:90:9f:dd:b6:fb:
                    ac:1f:f6:77:4c:f4:58:de:fa:23:48:56:86:c0:60:
                    c6:09:8f:ac:ab:68:a0:09:ae:78:91:ba:89:56:13:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:8E:B4:F7:80:95:F1:B5:07:76:B2:BE:6F:F1:4F:DC:BB:0B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/41e0b9c5-6931-3c27-a40c-78f04d0befb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:7777::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:41:2e:4e:08:ff:2c:cf:03:3c:80:7f:bb:96:d0:98:1b:cf:
         30:2d:cf:cd:e0:e2:58:18:43:da:1f:0b:28:6d:65:a6:15:1f:
         9d:6c:5c:b1:f2:36:07:cc:f7:d8:ef:4d:28:4f:e5:f5:74:a8:
         74:7d:28:6c:c7:5f:c2:ca:77:1a:8c:7b:be:a7:f4:ea:a1:ae:
         34:d4:ce:2e:2b:2a:40:06:ed:e9:b5:32:83:6a:03:1d:e3:88:
         b9:7a:de:76:5d:29:53:2a:fc:c6:a9:56:86:0e:a0:6c:6b:ec:
         2c:23:da:a7:67:ab:15:ef:e3:24:08:2f:78:41:54:1b:bc:71:
         b1:2c:9e:88:fd:88:b9:79:ca:97:49:cf:65:57:b4:d8:e8:c6:
         ff:0f:2e:71:7d:f8:f1:cd:30:e4:ab:f3:22:e0:70:18:c3:c7:
         e1:6f:69:e3:85:d7:3c:c7:23:e6:cb:89:9d:ff:c1:8f:b0:42:
         88:44:73:f8:b8:77:5a:12:ae:ac:ad:51:b4:65:fd:d3:2a:c6:
         dd:aa:9d:20:f2:a3:b2:4e:1f:d4:c1:ef:0e:ec:43:f2:36:fd:
         2a:2d:7a:50:ad:b0:bf:dc:f8:e1:dd:53:64:c6:18:07:73:fb:
         c5:f5:15:cf:c9:42:eb:b7:77:bb:85:19:2d:de:68:bc:69:4e:
         92:cf:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:00:19 2025 by rpki-client