Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e711c9a-971d-3d7b-bde3-aacc86988cba.roa
File:                     7e711c9a-971d-3d7b-bde3-aacc86988cba.roa (raw, json)
Hash identifier:          CvjmDebAtClbzRKKxu2R+PqUwrBZPYo7yD3TneLkEQ8=
Subject key identifier:   19:50:8B:59:3A:0D:F8:E1:24:A9:E2:09:C8:8F:6B:6A:39:BD:15:F1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A66C062946E8B23A53172DD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e711c9a-971d-3d7b-bde3-aacc86988cba.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        2606:54c1:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:62:94:6e:8b:23:a5:31:72:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=77db6a25-bf8b-4ac0-9cc6-29fc6858707a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:e9:11:1d:bb:98:8c:dd:b0:4c:a1:9f:eb:
                    fe:46:3a:f3:32:62:02:36:b9:50:d7:17:46:c2:83:
                    1d:ab:f7:17:18:2f:04:0f:f1:b8:95:39:9d:be:a3:
                    58:d2:6e:cc:0b:c4:55:c1:a1:c6:0f:92:eb:6b:80:
                    f8:95:8c:70:d3:07:60:b7:58:f0:c5:4b:b8:56:d4:
                    1f:ba:58:c6:2a:9d:60:de:c7:7c:2b:13:0a:d9:a4:
                    e6:08:f7:76:26:d6:cd:fd:4b:3d:7c:25:e5:cd:f5:
                    08:02:e3:98:fd:49:8a:27:b3:74:85:cf:d0:84:cf:
                    46:3d:6f:9c:89:b4:ab:ec:f8:5f:25:99:08:0b:b0:
                    fa:fd:8c:14:5f:cc:02:a7:44:56:be:07:f8:67:76:
                    2c:ff:45:a5:5a:0d:1f:89:c5:a3:b8:5d:69:50:e4:
                    92:65:67:b8:d6:12:ff:18:5c:25:f6:ee:da:9a:4a:
                    33:11:e7:42:85:0f:b6:d9:b8:0a:5f:da:23:a5:c7:
                    53:bf:82:13:17:de:26:32:47:bd:95:9c:2b:64:77:
                    75:10:0c:97:e4:75:56:c0:f1:8d:0f:8d:14:94:18:
                    7f:b6:d9:35:e4:85:03:88:54:7d:5d:eb:6d:74:8f:
                    4b:38:3a:6a:42:10:2c:50:3b:52:fb:f5:d5:cd:0f:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:8B:59:3A:0D:F8:E1:24:A9:E2:09:C8:8F:6B:6A:39:BD:15:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e711c9a-971d-3d7b-bde3-aacc86988cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:d8:bf:9b:a6:d5:12:e0:86:86:68:c3:ab:c2:df:3d:49:
         0b:3b:fa:88:cf:b8:c9:80:4d:33:11:78:e6:a5:53:f8:b7:39:
         db:74:ae:45:55:7b:f0:8d:e0:ce:28:f5:e9:ff:49:36:05:2c:
         9b:18:e9:7b:4a:24:e4:1b:15:2e:e4:0d:98:72:0f:f0:0e:6b:
         53:ea:9f:75:e6:8b:56:46:fa:46:30:93:ca:4b:12:45:8d:7e:
         68:d8:2a:3f:59:46:58:3d:dd:24:3b:87:67:c1:3e:0a:35:e0:
         f1:2b:58:74:51:04:21:31:c1:0b:f7:6e:87:00:52:6e:d9:a1:
         c3:e4:f5:3f:72:34:60:d4:69:37:02:cc:a9:8d:01:e4:c6:d5:
         e2:83:9f:25:14:89:ef:6f:85:ce:fa:1a:ae:6e:75:06:74:af:
         66:f6:c4:c2:47:0e:b4:51:4f:c5:1a:9c:3b:fe:76:49:69:c9:
         9a:e9:1e:c6:68:62:fa:8a:b8:07:8a:fe:26:41:15:4d:3d:fa:
         31:2b:49:25:12:5a:26:a8:b0:12:04:cb:e0:4d:a8:14:bb:ba:
         ba:71:67:22:a5:fc:ad:70:b1:53:3b:bd:3d:7e:e3:c6:7c:7e:
         e6:57:56:a6:7a:d6:08:97:7c:f4:d8:bf:76:15:28:0a:6e:f6:
         d0:c8:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:44:27 2025 by rpki-client