Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
File:                     bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa (raw, json)
Hash identifier:          9QuXF1wEtFo2TV6WEJDTskQRE+jrvx8AtsyiTRUogvQ=
Subject key identifier:   DB:7E:FA:39:27:E2:71:7B:B6:BD:39:BF:49:07:EF:91:45:BB:93:4D
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584A45403FB1D85D9E56BA1B5500
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     396356
IP address blocks:        2607:6b80:41::/48 maxlen: 48
                          2607:6b80:42::/48 maxlen: 48
                          2607:6b80:43::/48 maxlen: 48
                          2607:6b80:44::/48 maxlen: 48
                          2607:6b80:45::/48 maxlen: 48
                          2607:6b80:46::/48 maxlen: 48
                          2607:6b80:47::/48 maxlen: 48
                          2607:6b80:48::/48 maxlen: 48
                          2607:6b80:4a::/48 maxlen: 48
                          2607:6b80:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3f:b1:d8:5d:9e:56:ba:1b:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=363b55a2-0d98-4238-a4c0-c65f02ad0ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:7c:e0:d2:4a:77:d0:29:25:ac:ca:9f:37:
                    0b:b7:4b:2c:81:7b:81:da:a5:aa:1e:44:58:f0:73:
                    33:8c:13:89:b2:2d:51:78:1f:76:bd:92:7b:bb:72:
                    20:00:07:9d:9e:74:d6:56:f6:33:44:3b:32:2d:23:
                    fb:43:4c:91:f2:bc:d6:ec:46:73:b9:c7:2c:09:1f:
                    d1:b2:69:b1:38:71:9e:82:31:c9:ce:10:b6:4f:a2:
                    39:91:b8:df:37:d2:8f:74:47:18:22:ac:aa:5b:fc:
                    ed:22:d3:60:d5:94:19:d2:33:ad:d0:23:71:5b:c7:
                    f3:14:6d:51:ed:38:9b:5b:6c:f2:14:a3:96:73:0a:
                    01:6f:15:df:7c:17:d2:42:d6:14:12:9e:39:63:be:
                    dc:2f:e3:aa:56:14:25:e0:61:5a:de:fe:58:27:68:
                    cd:16:fb:5b:75:77:a0:a3:97:f1:7a:9b:fc:35:fd:
                    53:ab:1f:2e:f9:7d:3b:4b:8f:4c:36:7e:2e:49:f0:
                    05:79:cf:b0:13:de:cc:6c:88:0c:ff:31:55:d1:8c:
                    3c:0c:2b:a9:ce:45:2b:f3:77:38:a8:a0:35:5d:f3:
                    cb:0d:86:db:cf:16:8d:89:62:c5:ab:ea:50:d9:d2:
                    68:08:1a:2c:21:19:1c:4e:9b:e1:71:74:17:49:e4:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:FA:39:27:E2:71:7B:B6:BD:39:BF:49:07:EF:91:45:BB:93:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:41::-2607:6b80:48:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:4a::/48
                  2607:6b80:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:96:91:9b:8a:28:c3:34:12:84:ae:cc:b2:8d:77:b6:c1:
         0f:ca:50:21:b5:89:9b:0d:4c:e0:cd:a6:93:b3:94:7e:93:8d:
         e6:15:84:f1:bd:7c:38:e5:be:9a:98:99:5e:cd:86:37:b6:0e:
         e6:84:9f:35:28:61:c0:29:a2:c6:1f:15:42:c6:c1:10:cc:1f:
         07:c2:54:2f:a3:1e:e8:79:ed:c1:62:3a:af:d2:ff:51:7d:87:
         5c:cf:47:c0:3a:04:14:d2:94:d2:01:0f:45:5d:38:48:0d:94:
         f1:84:c3:e7:bf:6c:df:5a:4b:06:06:60:87:47:dd:c8:9e:d1:
         21:e6:5a:61:5f:0f:de:c5:6b:0b:ff:48:fc:92:e3:fe:3c:e1:
         cd:e0:5a:6f:52:98:3d:c9:c5:d0:7a:82:1e:7d:0a:86:8d:56:
         84:9c:e7:1c:2c:4f:1e:eb:bc:bb:8c:17:76:a5:f2:7c:fa:58:
         b5:60:b3:71:13:4d:26:f4:82:66:b4:d7:79:28:62:f3:b5:3c:
         3b:86:7b:28:f1:94:8a:16:16:a7:52:42:aa:b0:bf:92:1d:86:
         73:a6:f3:ad:d1:d7:37:13:f8:9b:ee:1b:79:da:07:b8:07:85:
         d9:cb:72:6b:0b:e7:58:fa:6b:5a:6d:33:df:b5:0e:60:58:3c:
         0a:cf:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:38:05 2025 by rpki-client