Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa
File:                     dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa (raw, json)
Hash identifier:          tzNkSFHZV5mcGoXp8G7YBKln4rEIxbrRk5hxT43VRgY=
Subject key identifier:   51:7F:D1:1A:79:1E:64:7E:19:BB:7B:0D:A1:F7:A6:E5:1C:49:B9:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A9E9665CA00332C30194AEA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     13335
IP address blocks:        2606:54c2:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:65:ca:00:33:2c:30:19:4a:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4f8fb3cf-298a-4d12-a973-6ce0479643f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:f8:5d:b5:e9:59:4f:11:9d:24:2c:60:cc:
                    e7:5a:69:91:7f:5f:d8:26:1c:a3:bf:ff:8e:11:fd:
                    2c:34:e6:2f:73:32:44:69:6e:71:c2:eb:20:12:30:
                    02:1c:c3:34:18:78:a0:42:44:9f:d6:8d:f2:ba:02:
                    0d:ee:33:31:40:0a:77:75:57:e3:2f:a7:79:a9:09:
                    f2:6d:61:f5:55:77:3a:e5:b5:87:21:d1:a1:bc:cd:
                    69:5c:f2:74:18:0a:ed:8e:64:a9:96:6e:b9:40:8a:
                    6a:2c:33:f9:2e:6d:49:41:66:65:f2:7b:47:6f:ce:
                    fd:d6:e8:e2:8d:af:6c:21:09:75:f8:5b:26:c0:7b:
                    dd:16:f3:6e:c4:45:41:04:f4:e7:23:45:7c:20:5e:
                    9d:8d:82:ab:e2:fc:ed:e6:21:fc:7a:ef:36:3c:d9:
                    fc:b6:cd:a9:f5:f8:10:bf:a3:37:73:6d:c8:3d:f6:
                    ca:aa:e2:a6:4c:c2:7a:42:c8:a5:ac:ea:30:52:b5:
                    4c:05:83:06:87:7a:8d:c3:68:8f:1a:43:80:1a:30:
                    ac:2c:02:e1:f2:36:dc:9e:36:f4:f8:73:ed:91:a5:
                    b6:06:0e:77:5a:8c:04:da:45:0b:24:41:2f:35:35:
                    1d:05:fd:98:30:9a:d2:d5:10:46:c2:4c:c4:a2:2c:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7F:D1:1A:79:1E:64:7E:19:BB:7B:0D:A1:F7:A6:E5:1C:49:B9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c2:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:54:47:ac:93:af:2d:de:78:29:1f:64:31:26:fe:df:bf:
         2e:98:7e:ac:b7:f3:37:db:36:e1:fa:59:73:78:f3:f5:1d:f2:
         e5:53:a2:1d:3b:07:99:ce:46:6a:2f:f8:a6:e2:2f:46:9a:7d:
         76:d2:22:c4:c5:9f:c8:1e:42:28:03:01:29:cf:39:e6:d8:de:
         41:9c:b2:2e:af:67:1f:39:96:cf:88:de:32:b7:77:e3:cb:16:
         04:86:24:01:3b:d1:90:99:7d:9b:f6:d5:3f:0c:ea:a7:98:32:
         d2:9c:c7:59:8e:62:e4:a8:f8:c9:a4:50:f6:93:f3:1c:be:1c:
         37:c3:53:8c:35:1a:d1:40:00:9c:13:61:b5:65:b2:59:96:2e:
         a5:7b:de:cb:fe:ea:b6:fc:73:5b:22:5f:97:9c:7d:55:b5:73:
         c3:0b:81:16:ab:72:27:36:f5:61:64:4b:dd:94:03:37:16:12:
         bc:ff:88:61:03:17:32:a1:d2:ff:b0:f3:01:c3:7d:cc:eb:83:
         4c:04:68:3d:7c:c3:ec:1f:14:a9:77:b3:bc:d6:db:df:9a:dd:
         04:12:5a:d8:01:86:5b:6a:fc:a9:0e:bd:40:13:3e:ac:6c:46:
         ba:9e:89:8f:3b:e7:6a:45:a9:17:1b:44:00:75:16:24:8c:75:
         9f:f9:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:59:28 2025 by rpki-client