Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa
File:                     0b40fd45-6ff0-35fa-8565-9949252a67f4.roa (raw, json)
Hash identifier:          lbBsX3FCV6ST9r06kQqs0Qsq/EuTiLyHkDRfmKo/idc=
Subject key identifier:   29:21:DC:90:57:65:E9:74:7B:F3:0E:36:7C:F8:A0:11:D2:A1:72:7E
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F4328584A5765CD68C04F4AC7E44DBF00
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2620:b6:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:68:c0:4f:4a:c7:e4:4d:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=24f739fc-d311-4842-9147-a20104f1e89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:a1:c9:6d:67:e2:cb:a0:9d:ee:56:88:44:
                    65:1e:ed:8e:cb:dc:be:a1:d2:c5:f9:84:8a:d5:73:
                    0a:f2:5c:f7:72:0f:92:ca:69:d1:d8:18:4e:0e:56:
                    2e:f3:0e:6a:c0:85:61:1b:58:74:af:51:06:0b:1d:
                    9d:f5:00:e0:e5:c9:4f:7e:49:b4:5c:4a:81:c6:24:
                    c5:43:93:7a:c6:c0:e4:e7:c8:f6:6c:32:a1:70:e8:
                    3d:ed:50:2f:48:61:b7:f8:6c:4f:08:9e:64:f3:11:
                    9a:c6:37:da:02:be:27:04:e2:44:49:2f:8a:24:0a:
                    61:36:2c:69:97:d7:0b:bc:4b:68:de:55:7f:84:d8:
                    29:f8:be:fe:2e:8e:2e:85:a0:7b:3d:e5:da:53:fa:
                    e1:36:ee:01:24:fc:05:ef:f6:2b:7e:7e:03:a0:45:
                    39:e2:f5:81:3c:75:8c:dc:f1:d9:2d:42:05:2c:f3:
                    08:8c:67:71:e2:77:a9:c7:7d:ac:6d:8e:47:81:11:
                    2f:0f:ec:8e:07:7c:d9:33:88:7a:e1:bc:a6:ca:aa:
                    fa:00:3c:09:43:bf:2c:a7:66:76:2f:87:25:98:5d:
                    75:17:db:43:45:ca:b4:96:36:d8:bd:94:d4:f2:f6:
                    9e:9f:33:4d:52:4c:6b:fe:df:2f:65:68:33:58:0a:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:DC:90:57:65:E9:74:7B:F3:0E:36:7C:F8:A0:11:D2:A1:72:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:03:0f:aa:82:bf:a8:9c:0f:29:c3:61:31:67:72:7b:f8:
         97:12:3b:fb:c7:61:fe:ef:28:45:5d:97:53:2e:70:5f:06:00:
         80:a9:5f:9a:34:53:95:4a:23:35:1f:50:4d:ea:d7:5b:1d:95:
         28:18:8a:98:e4:f9:df:1b:21:67:3d:f3:1a:38:45:49:1b:93:
         26:00:10:55:24:52:11:3f:7a:60:09:65:29:88:5d:3e:b9:eb:
         29:a0:c2:43:e9:d0:db:30:d4:1d:22:c0:66:3f:b1:28:19:4f:
         6a:09:52:16:0e:c5:04:81:59:7a:dd:25:87:98:59:bf:91:fd:
         ab:71:4b:21:37:9f:f2:21:c7:25:ba:89:13:1c:47:1f:f0:d3:
         58:04:55:ac:06:8c:1d:b8:03:ee:43:e8:3a:0e:4a:bc:0d:df:
         91:3c:83:45:d2:8e:3e:7a:a7:66:37:0d:7c:05:9d:09:b6:94:
         5f:50:0a:40:b3:72:8b:e5:34:65:24:ae:58:c7:ef:16:ec:40:
         f2:c0:08:71:ee:59:8f:a3:82:a7:1d:43:28:48:5e:4d:71:08:
         47:27:32:62:c0:1f:69:d0:a9:05:63:54:1e:3a:99:c0:ad:6c:
         69:7b:08:b2:6f:27:4e:2b:ca:c6:3d:d3:12:02:2e:52:b8:a5:
         54:28:3c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:17 2025 by rpki-client