Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
File:                     c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa (raw, json)
Hash identifier:          fnwQOnvCn4/bVPjL6n4spBvsk28Y9LGwUSxVneASWz0=
Subject key identifier:   24:65:D3:63:05:AB:BB:56:DF:A6:5F:95:7D:0B:47:2F:DC:31:B6:88
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A6F207E33C3D2B56513669D00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     174
IP address blocks:        2601:2008::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7e:33:c3:d2:b5:65:13:66:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=19d05406-0eb4-47e8-96c9-28b9bcc0e2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:c6:33:48:e9:fa:3f:6a:8e:1a:0e:56:cf:
                    e2:00:9a:3d:ca:20:2b:3f:de:bf:fc:4e:c4:d4:39:
                    49:63:1d:76:14:03:d2:57:c9:e9:3f:69:42:33:f2:
                    9c:24:61:16:fa:9a:e6:a3:33:b0:8a:45:a2:6f:aa:
                    a2:14:16:e9:c7:45:31:8f:62:8a:1d:2d:09:be:63:
                    0e:4a:51:fb:b7:96:af:d0:f1:18:5a:4e:29:5c:59:
                    b4:e4:cf:7d:b6:e9:43:50:1f:c8:41:c7:2b:46:72:
                    76:8c:a9:06:2b:b4:d1:53:13:62:54:21:8f:8b:f7:
                    69:83:ed:08:e0:f5:81:e0:96:46:7b:b7:68:b1:5f:
                    ab:d6:f9:48:0f:ba:e5:ee:d4:23:a3:84:06:06:4b:
                    12:d6:af:03:0b:fb:f9:63:ca:4b:01:a7:89:0f:e1:
                    45:1d:07:35:c5:d9:67:3d:cd:08:c0:84:c4:9a:e8:
                    ea:ae:9a:2e:41:02:5c:3e:2c:ba:a8:43:ab:5a:20:
                    66:16:a4:85:21:f8:02:8a:f4:aa:12:dd:05:e8:9c:
                    b3:1a:b5:2d:e1:d0:67:5f:69:08:65:5a:43:1d:55:
                    5a:26:f7:19:da:97:c6:cf:fc:a5:8f:ac:2a:3b:8c:
                    bd:ee:dd:0c:ec:d3:46:e3:c9:03:e6:e1:4d:02:19:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:D3:63:05:AB:BB:56:DF:A6:5F:95:7D:0B:47:2F:DC:31:B6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:25:10:41:44:18:18:e8:89:46:c3:fa:2b:5d:90:a2:b4:12:
         a0:a5:bf:7b:52:b3:4c:b4:da:54:e9:90:2b:6f:bf:1c:7b:18:
         70:ad:b0:16:0a:89:f4:0b:e9:b3:eb:a7:fb:31:8c:10:04:61:
         84:95:ee:c1:fb:c0:8c:15:9c:1c:3f:62:63:a9:14:da:f0:d6:
         c7:62:4c:22:f8:5e:07:c4:27:66:bb:0f:54:9d:4c:14:40:8e:
         72:77:63:26:1d:47:96:2f:a4:f4:c3:d3:1b:6c:ef:96:b2:c1:
         7f:02:45:f5:fc:0d:a7:e2:a6:ad:6e:1c:dd:91:e5:6b:7b:c4:
         83:4d:88:e5:95:e2:9b:3c:6e:18:ed:54:dc:5d:35:78:32:33:
         3c:dc:e1:59:da:7b:e8:b9:85:46:ca:7a:05:9c:67:ad:8f:1d:
         78:7e:94:1e:79:2b:27:88:63:b9:b8:ac:30:63:64:34:cd:08:
         22:4e:ed:dd:ba:52:47:7d:70:15:d3:21:ae:6b:50:e2:33:10:
         5c:49:a6:5d:15:8a:3a:be:ba:94:07:d5:01:6b:14:57:b3:f0:
         76:96:96:67:3f:ab:62:87:b4:7b:02:be:54:fe:07:3a:f4:94:
         c2:da:6c:ab:fa:d6:77:fb:18:c7:09:ca:d8:48:38:f2:35:0e:
         ac:57:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:30:57 2025 by rpki-client