Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f2fc9ebd-5322-319e-92fc-ab1e1f23e104.roa
File:                     f2fc9ebd-5322-319e-92fc-ab1e1f23e104.roa (raw, json)
Hash identifier:          kcEhs55TTz+PTWUwtC8yao+DajAXPYhub19a8aw02iM=
Subject key identifier:   E7:F9:48:30:F6:25:ED:62:CD:98:02:5B:86:3F:37:A3:3C:59:19:BD
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584A3B7AEC879CC28907CB7CDC80
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f2fc9ebd-5322-319e-92fc-ab1e1f23e104.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     133480
IP address blocks:        2607:6b80:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ec:87:9c:c2:89:07:cb:7c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b8c73506-0126-4dc8-949d-c322b098c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:3b:15:2d:7f:f5:97:de:39:e8:53:fc:bd:
                    d1:89:c9:88:54:de:f9:02:0e:d3:22:53:c0:55:54:
                    d8:9b:95:56:6f:7e:4b:24:6f:db:20:fa:50:63:ab:
                    06:4b:69:53:fa:b0:d8:47:9d:ec:01:db:8c:55:01:
                    bf:e7:82:08:2c:9c:2e:c0:4c:b4:c6:9a:25:9a:33:
                    b0:05:42:54:20:a5:f1:8b:14:6b:05:18:3f:f6:4c:
                    b5:3c:b7:2d:da:28:e8:41:b6:eb:c1:dc:62:00:6c:
                    c7:07:3c:fb:6c:35:4e:69:ff:e8:d6:cd:17:7c:0c:
                    0f:87:7e:3d:59:c1:92:e6:bc:9c:71:24:d8:74:15:
                    bd:51:4d:97:2c:07:68:ae:b1:c7:5e:a8:41:52:b9:
                    a4:e9:c6:ef:b9:87:19:6e:a7:28:d2:ef:1f:b9:61:
                    05:63:dc:a0:0e:ac:7a:17:ea:aa:fb:0f:ee:72:01:
                    c5:b5:44:70:cd:86:bb:18:ab:93:c7:09:48:0c:3a:
                    dc:6b:54:a2:86:b6:13:94:1f:45:d8:57:aa:aa:14:
                    ed:f6:0d:6a:f1:04:73:88:c2:6d:1b:58:78:eb:3c:
                    a0:bb:a4:6c:fb:1a:4d:0d:4c:21:7c:0b:0b:db:c8:
                    82:93:61:ea:42:1b:1b:e3:23:5d:36:dd:c7:68:8b:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F9:48:30:F6:25:ED:62:CD:98:02:5B:86:3F:37:A3:3C:59:19:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f2fc9ebd-5322-319e-92fc-ab1e1f23e104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:b9:1b:47:9c:aa:a1:41:d3:29:b7:2a:85:e3:9d:a3:56:
         51:83:4f:ce:b2:83:7f:46:8c:e1:8a:8d:84:d6:c5:d1:2b:80:
         86:59:82:dc:ef:bb:0f:d8:c9:75:e1:4c:1a:b8:09:b8:d4:eb:
         f6:25:bb:ea:27:ed:5f:7b:23:f2:e2:7c:3a:3b:be:ea:8c:13:
         d0:68:f4:de:fa:bd:d5:73:90:d5:74:5c:b4:5d:14:fb:bb:09:
         a7:58:91:54:b4:43:1c:7e:0b:1a:2a:9e:63:3c:52:a4:50:eb:
         da:97:21:46:06:47:74:a5:71:33:a8:fc:05:5f:40:28:7d:ab:
         39:b8:57:5f:ca:7c:1e:57:fb:d9:af:c3:2b:07:84:89:c6:bf:
         cf:fa:9c:37:f7:5b:c5:ea:dc:ae:ba:ab:a8:8a:b8:ba:68:48:
         1e:3d:6c:f2:13:21:1e:31:67:7c:ff:9a:02:af:fd:56:79:5d:
         4a:37:e5:3a:2a:56:01:cc:56:79:d5:43:bf:ef:c1:fc:6d:20:
         f4:91:93:e3:1e:66:46:d7:8b:bc:5e:99:dc:72:2e:89:33:15:
         34:aa:95:42:10:4c:63:c4:7d:e0:c0:2a:e1:a8:0d:7c:7d:a1:
         58:47:8b:74:f5:67:15:7b:e5:9a:09:7e:be:98:02:d8:bc:f2:
         de:c5:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:21:38 2025 by rpki-client