Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa
File:                     d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa (raw, json)
Hash identifier:          vxEcUqq/guujL05qA3Qxy26c9qFUHzptW6UEWpfNC4E=
Subject key identifier:   AE:98:93:AE:16:B1:C1:87:FD:5B:05:B7:25:BE:4E:7D:89:14:39:71
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F4328584A374AC4DD6AECA3C8F47E6D58
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     397085
IP address blocks:        2620:13c:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c4:dd:6a:ec:a3:c8:f4:7e:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=6f2f6785-3b25-41ec-ba19-135be6ca4797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:cd:a0:76:8f:ef:90:88:59:e8:6d:45:93:
                    c7:84:45:7e:10:a3:0e:83:b9:37:87:15:da:ae:28:
                    4d:8d:f2:b2:ad:24:42:50:23:69:d8:77:02:44:e8:
                    97:ec:8e:7d:e6:a8:6e:62:85:0f:9f:26:71:d7:43:
                    3f:c2:13:56:6d:cd:45:53:f1:c2:5c:0f:9e:06:1c:
                    4c:f1:29:d3:26:b8:5e:2d:43:e9:16:57:44:eb:08:
                    2f:dd:d4:90:60:41:b6:ca:d5:af:30:a4:98:69:bd:
                    66:15:41:66:17:48:e6:4f:da:bc:c5:02:6d:75:79:
                    57:7d:82:7a:65:17:b9:3e:b3:bd:5e:d4:73:bf:4f:
                    28:ab:27:22:46:41:59:a3:a4:76:1f:d0:f4:33:aa:
                    c4:be:1f:fe:ad:30:f5:23:04:7e:ad:bd:fa:91:8d:
                    01:79:6a:79:42:de:7c:db:f5:11:06:aa:21:15:04:
                    a3:be:fa:11:52:5e:e2:52:02:2c:f7:b7:8e:d1:5d:
                    a3:ac:83:3a:a7:45:18:3d:65:a4:eb:b9:c3:e1:4c:
                    4d:b3:c1:eb:b6:21:18:ae:b1:db:39:f1:af:41:86:
                    ca:30:e3:eb:98:87:2d:7e:b1:d8:11:2b:90:78:58:
                    1f:10:67:85:3e:a3:12:79:36:4c:5c:c5:8b:f9:30:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:98:93:AE:16:B1:C1:87:FD:5B:05:B7:25:BE:4E:7D:89:14:39:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:a3:6f:af:9b:f4:04:fb:73:71:99:3d:de:41:18:12:99:
         4f:56:80:ec:6f:7f:fd:b5:21:d8:23:af:29:65:07:11:71:40:
         c9:d2:d5:cc:a4:19:6e:d4:54:3b:8d:58:6f:75:cd:88:85:fa:
         f2:5d:e7:db:85:19:b0:df:6f:e4:93:4f:7c:40:e9:17:16:01:
         72:33:e3:82:b4:10:ee:c0:ec:5f:36:0f:3d:9f:18:86:42:25:
         cc:d8:9e:a9:e4:41:44:26:58:fb:0c:ba:65:23:67:db:ed:2b:
         c4:77:7a:4a:6d:9e:3d:a8:a1:31:c5:c8:71:72:33:ec:6a:a9:
         29:48:c6:23:07:61:21:22:05:e4:71:46:25:93:84:ff:cd:52:
         64:b0:8e:ea:7d:c6:82:64:1e:c0:01:ba:15:27:69:cc:d0:59:
         6c:0f:a9:0b:21:e3:0b:d6:af:fe:4a:a1:8c:a4:db:3d:76:0f:
         cb:8b:16:ad:1c:ff:02:0c:5c:f0:a4:ba:5d:3c:e8:65:bc:7c:
         6b:e2:24:e5:6e:43:13:54:d2:ff:5e:54:13:c8:30:7d:fb:18:
         2c:c2:d3:14:81:93:30:83:7e:86:51:3c:2e:d9:b4:b2:44:54:
         4f:13:9e:6e:1d:a1:58:8d:88:ae:80:32:4c:6e:b1:a3:5f:42:
         33:bb:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:55:25 2025 by rpki-client