Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa
File:                     a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa (raw, json)
Hash identifier:          5hUJZiIrfTBhKtoSRjOK2oFpGoyz/hjjYvyRXN+b0A8=
Subject key identifier:   07:7B:98:06:61:F5:41:D6:D9:55:10:0E:C7:C5:F0:2D:B8:6F:9F:A5
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A5335A085C2CC9FED7E41C700
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2606:dc00:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a0:85:c2:cc:9f:ed:7e:41:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=7006fa2f-0140-4a62-8cba-a5f0faac562c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:d9:68:64:48:49:ed:d7:9b:87:7a:52:b7:
                    47:4c:02:49:e6:49:8a:27:b6:1c:86:17:39:8b:c5:
                    96:8e:f5:a1:2c:8a:65:27:e7:77:7e:45:df:9d:29:
                    86:d7:0c:6b:54:b4:14:64:c2:66:f8:48:1c:84:9d:
                    8f:77:cf:5c:f6:5b:20:0b:55:2c:92:64:7b:ff:1c:
                    ac:ac:cb:93:1c:47:6b:cd:4c:db:1c:85:13:3f:b2:
                    d2:64:26:65:52:77:b4:e4:32:ae:87:1c:b4:64:0d:
                    64:38:41:e5:dc:1a:0b:95:80:fb:68:6e:77:16:60:
                    30:87:08:f8:2f:fb:9d:5b:67:40:09:ab:29:9b:f3:
                    c1:92:a3:64:4f:90:e6:8e:fe:91:49:8f:1b:76:34:
                    56:b6:39:06:2e:ff:77:13:05:3a:1b:60:ca:4e:b3:
                    1b:d1:05:e4:94:82:35:41:46:bd:e0:a4:7a:b7:b2:
                    f5:6f:62:3f:b6:9c:aa:5b:b1:45:d0:8e:f3:77:48:
                    9a:47:60:5f:fc:62:36:47:1a:34:16:b0:d5:bc:a5:
                    90:d7:a8:bd:03:80:a7:79:6a:2c:bc:cf:da:52:3a:
                    08:75:81:25:a9:55:98:7a:6c:75:e5:54:99:07:0d:
                    57:d4:80:ad:50:8f:4b:c5:d0:f5:67:dd:97:2b:01:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7B:98:06:61:F5:41:D6:D9:55:10:0E:C7:C5:F0:2D:B8:6F:9F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a9aea0bf-6df4-3671-9ee3-a610dd69c55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc00:ff00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:f4:ac:21:1d:a0:5c:7f:4f:54:f0:c8:2a:de:85:03:c3:
         a0:fe:0a:cc:7f:2d:f4:48:45:1e:89:43:32:34:33:81:18:85:
         54:2c:2c:b5:25:95:66:c7:59:e5:11:10:f0:ef:7f:e4:a5:8d:
         84:c6:f4:59:cb:51:bc:93:2d:e1:23:b7:93:6d:2c:29:c3:46:
         14:ae:98:d5:c3:f9:60:77:f8:07:0b:c8:21:43:b4:5e:12:9a:
         7c:6c:cb:1d:4e:85:4e:b7:b4:d0:4a:67:d4:6f:2f:90:ee:94:
         91:c1:34:ca:ba:99:8a:e8:53:65:9b:90:92:e1:6a:cf:69:10:
         8b:c4:90:8d:9b:9a:5f:2e:57:b7:5c:9d:20:12:a7:9e:bf:97:
         05:84:64:f9:e9:46:98:8f:e0:ad:18:cc:db:35:5e:f6:a7:e1:
         ec:d1:3a:f6:85:08:cd:c1:a9:11:6f:52:05:dc:b0:32:22:12:
         0e:7f:6b:8b:a1:63:a5:7f:c9:a1:be:56:12:08:bd:ba:b4:ae:
         71:49:78:99:4b:b5:e1:13:7e:c1:b8:cd:25:bc:7e:9d:f1:21:
         dd:9f:99:41:43:fd:84:91:e7:b3:30:5d:53:2c:10:17:bb:29:
         20:10:49:41:de:de:33:3f:59:49:46:0e:98:cf:f4:2e:dd:84:
         ae:11:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:29 2025 by rpki-client