Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a440c451-9842-3f4b-b44d-14d4c01e1099.roa
File:                     a440c451-9842-3f4b-b44d-14d4c01e1099.roa (raw, json)
Hash identifier:          d0oH0o641JKrwi0+S/6Hz2/BFyqwSC/kROgsrRhnIyU=
Subject key identifier:   80:AF:2D:53:E9:4A:5C:96:1F:82:7A:44:86:C5:AD:0D:C0:EA:99:FF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A7FE0937382D48F0C329D8680
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a440c451-9842-3f4b-b44d-14d4c01e1099.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     22781
IP address blocks:        2606:b300:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:93:73:82:d4:8f:0c:32:9d:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=248b826c-2168-430b-9b8a-8a357f472515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:a8:bb:73:01:c5:15:c6:79:b1:ce:30:03:
                    db:cd:49:a9:9b:86:ad:30:b9:61:13:63:96:96:16:
                    15:9f:fd:83:17:f5:28:78:7a:5d:1c:15:bc:22:bb:
                    47:2a:83:5e:a9:ad:e0:7c:93:99:0e:0b:aa:f3:9f:
                    1d:02:77:a4:60:6b:ec:55:44:53:ad:6f:eb:0e:89:
                    52:21:a0:ef:52:e3:96:0c:1c:14:9e:cb:bd:8e:74:
                    0a:45:3a:31:bd:a6:d7:97:a7:92:bd:df:17:1e:c1:
                    6a:bc:37:9b:53:ee:e4:77:40:4d:b8:fa:76:40:06:
                    2e:c7:76:1e:b1:23:1d:36:a8:38:e2:fd:44:c2:ad:
                    6c:36:6a:3b:5c:e6:4c:f6:d0:5a:0d:57:ad:9f:fd:
                    51:2f:3e:ae:6a:a8:3b:51:30:9c:0d:a5:40:98:82:
                    eb:3f:d4:94:3b:f7:20:fe:3d:01:b7:aa:d0:24:99:
                    30:21:35:c8:f6:20:90:b8:28:a3:de:38:d0:4b:52:
                    ab:11:b5:46:40:63:63:89:75:65:2d:f1:7e:18:bb:
                    a9:35:cf:d4:08:d4:36:56:dc:a0:ab:e8:96:bf:0c:
                    5e:ae:c3:00:5a:89:79:8f:c6:82:03:72:e1:d6:98:
                    c0:94:81:bf:35:1b:47:42:3d:d0:34:81:85:41:93:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:2D:53:E9:4A:5C:96:1F:82:7A:44:86:C5:AD:0D:C0:EA:99:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a440c451-9842-3f4b-b44d-14d4c01e1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:9d:b6:5b:ef:0d:63:ca:af:fb:45:97:a4:37:be:a4:3a:
         b3:f9:b0:bf:92:d1:eb:1b:af:fd:d5:42:1c:8f:4a:48:b1:15:
         eb:af:d4:dd:29:e1:6a:68:a7:52:74:1b:ac:53:f1:42:14:7a:
         88:62:65:3a:b9:3f:3c:68:3a:dd:b3:4f:16:c8:49:d7:9b:6c:
         ab:e5:bc:fb:38:91:d1:83:66:dc:9b:69:7a:25:b6:c7:1c:dc:
         66:0a:f6:dc:e1:75:36:a8:63:4c:4f:74:45:86:14:47:cb:64:
         64:99:32:76:9c:f8:33:84:00:d8:57:43:a1:63:04:41:54:6e:
         14:39:28:10:e3:cb:94:dd:78:c5:d4:db:aa:fa:4c:ae:57:39:
         01:60:b7:71:61:c4:c8:c2:d8:96:a5:33:69:1f:b5:70:1c:11:
         f4:c7:dc:b3:54:f5:3e:75:48:ac:9c:f4:9d:9d:b1:be:fd:a8:
         d2:39:06:63:c7:7c:c8:86:be:6b:58:f3:25:a5:81:d6:d0:7e:
         26:90:a1:77:8a:0a:c2:1c:84:d0:4b:f4:ad:11:04:63:b6:3e:
         bd:cb:dd:82:12:58:7b:2c:e6:af:16:e5:a4:eb:c6:84:d5:21:
         cf:47:7c:31:2b:11:42:8d:42:a7:95:33:14:b6:0e:31:8f:49:
         f5:c2:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:00:34 2025 by rpki-client