Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
File:                     d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa (raw, json)
Hash identifier:          dCMw1oLOozL1O/waOibxfO4hpNKleKY2zQEmMj0RGcs=
Subject key identifier:   1B:72:37:F4:98:2A:3B:FA:69:CA:11:FF:CA:AE:90:61:36:A5:49:CF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A6F207B5BC04A2A4CFC03AD80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     62651
IP address blocks:        2604:c980:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7b:5b:c0:4a:2a:4c:fc:03:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=96f45de5-f2a3-4bd5-af2f-651f9b62009b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:38:f4:e0:17:f2:a1:5f:26:ab:ae:2d:1c:
                    e4:b2:8d:ae:e8:c2:bb:e3:aa:9d:52:44:f3:41:98:
                    9c:29:96:42:96:6f:8a:c9:6c:02:95:88:7c:8c:b8:
                    00:fd:3b:9c:98:d9:98:01:18:5e:ed:35:40:03:a1:
                    f7:4d:de:73:29:f7:ac:35:7a:67:40:fe:d9:14:eb:
                    44:f2:25:66:8e:fd:a7:a1:68:3f:c5:40:85:47:29:
                    8c:f9:d1:83:0f:d1:dd:cc:c4:dc:6a:d6:5e:12:e6:
                    dd:f3:40:f9:67:ab:a7:fb:22:b6:cb:40:28:2a:fa:
                    0b:d5:d3:ea:6e:96:dd:10:0f:2a:1b:ae:67:dc:6e:
                    8c:ec:72:80:8c:b8:c2:e7:c4:b5:6f:41:ce:23:a8:
                    4a:8a:db:0e:3b:0b:94:45:fb:71:60:68:6d:0a:74:
                    29:f8:a1:f2:cb:54:75:b4:8b:12:52:4d:f4:2f:b5:
                    63:6a:51:4f:4d:39:53:dc:b3:9b:bf:7b:3b:1f:89:
                    ee:3e:03:a3:de:28:b2:cf:f4:36:58:68:b5:f2:ef:
                    b7:60:21:f7:c3:81:ff:41:70:de:53:5e:58:41:9b:
                    35:d8:55:9e:f3:58:10:2c:06:00:78:01:53:03:9d:
                    c4:d8:1f:c4:99:44:51:20:14:e3:0c:23:54:13:db:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:37:F4:98:2A:3B:FA:69:CA:11:FF:CA:AE:90:61:36:A5:49:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:f3:ba:b4:cc:ee:de:df:ad:69:a5:bd:00:5e:ee:70:5d:
         d1:49:63:32:e2:e9:48:e5:f0:d5:e5:17:46:3e:47:4e:9e:42:
         c4:ea:e6:09:66:1d:6d:5c:20:2a:f9:29:d8:9c:42:23:4a:97:
         01:10:d7:56:81:60:b8:d9:15:38:40:ff:dd:c9:cf:db:35:c1:
         0e:48:8b:17:92:f7:b3:89:4f:05:c7:2b:46:3b:3e:0c:48:22:
         7a:50:82:2d:ff:f9:49:6f:18:61:c4:fc:4d:9a:ca:57:fb:90:
         f0:bb:3a:45:9b:17:8b:ed:f8:3e:cf:26:8e:ad:76:17:6b:ff:
         87:5c:c1:d0:19:20:69:f9:75:0d:34:9a:fe:c1:66:f5:e1:b4:
         e5:c5:70:0d:6d:09:cb:2f:ce:3d:40:dc:44:6b:10:07:00:c5:
         a2:fe:98:82:73:73:1d:8c:4b:28:f9:ce:f3:20:06:f9:18:4d:
         6d:88:f0:61:0a:16:f6:ee:45:b0:72:06:3d:9f:78:d7:99:0b:
         ea:ac:85:a5:77:cb:65:56:d3:95:31:fd:1f:95:71:b7:67:a2:
         97:29:ec:18:2e:52:e2:1c:04:b1:00:64:36:4d:77:b9:84:b6:
         44:0d:0b:81:bd:b7:5b:60:d9:b4:55:04:cb:e3:5d:55:cf:fa:
         ef:ef:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:03:44 2025 by rpki-client