Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95732307-19d0-37c2-8c6b-9281deba9849.roa
File:                     95732307-19d0-37c2-8c6b-9281deba9849.roa (raw, json)
Hash identifier:          BfwsbTyfbH+BJ+0OeQoWJbFEQzqxuNDO7B62fHBQhSw=
Subject key identifier:   AE:37:76:D3:79:34:45:47:B0:50:BD:10:E9:9C:1B:82:9C:2D:04:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F87A9FBC3890AF7A0D6DC880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95732307-19d0-37c2-8c6b-9281deba9849.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     13335
IP address blocks:        2606:4700:4020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:9f:bc:38:90:af:7a:0d:6d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=d1e98200-df6f-428f-80e4-2413da7e22b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:4d:e9:de:ef:75:3d:95:8e:a7:fa:f6:01:
                    69:fd:bc:28:4c:ff:f7:10:19:ce:84:c0:e5:ea:30:
                    d8:f9:24:8d:c4:e5:2e:ec:44:6a:dd:9b:9b:35:f7:
                    94:55:09:33:84:43:d1:98:72:07:c4:38:9e:04:25:
                    85:23:5f:9b:92:a9:13:89:65:96:3e:93:1a:dd:c7:
                    1c:83:16:30:11:51:15:5e:85:e0:86:57:2c:24:a9:
                    41:8e:a4:1d:fc:65:f5:82:c5:b3:eb:b5:17:f5:68:
                    9e:cf:01:fe:c4:14:db:d7:8a:ef:13:39:7f:e6:88:
                    4d:e3:52:5e:f2:cf:6c:f8:b6:9f:2b:c1:ea:41:c6:
                    b3:59:aa:b7:c3:be:36:ec:b5:88:b7:80:c4:47:2e:
                    1a:74:3f:3f:5e:22:05:02:4d:42:d3:2c:7e:a3:37:
                    7d:a4:51:96:3a:c2:3c:f7:d4:62:85:0f:81:cc:32:
                    19:02:09:53:1a:b1:23:b1:70:86:f2:a0:c3:9f:92:
                    78:44:80:d9:95:62:67:b8:79:ff:8d:7c:7c:f6:ea:
                    4e:2c:cf:c3:c3:7b:5d:b2:d5:a5:33:5c:7f:2c:ed:
                    65:ce:25:c7:df:bd:88:19:7f:ea:79:31:21:75:f6:
                    73:04:2b:05:64:e9:6a:bd:fc:46:63:73:f1:28:56:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:76:D3:79:34:45:47:B0:50:BD:10:E9:9C:1B:82:9C:2D:04:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95732307-19d0-37c2-8c6b-9281deba9849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:0b:c6:ef:88:51:5e:6d:66:bc:05:01:25:2d:4d:55:de:d6:
         2d:e6:d2:7e:18:f5:9f:6e:8a:c2:57:58:a5:15:07:80:fb:2a:
         a7:82:78:3f:fe:1c:b0:0b:c7:30:04:ae:17:18:13:3e:cc:68:
         f6:3e:7c:e4:d5:9c:22:81:77:9c:d2:e0:e4:71:15:99:3e:65:
         86:1f:72:8a:c6:fe:5d:40:e0:f2:25:e2:28:ab:17:26:1a:46:
         c3:b1:af:bf:e6:1f:7e:63:da:dc:4d:be:15:c7:a5:48:1e:d8:
         05:d5:bc:37:bc:79:70:1c:00:24:29:1a:1a:57:9c:04:75:b9:
         60:7e:35:3b:93:ee:18:67:3f:eb:ca:73:0c:d9:7f:f6:fc:ab:
         8d:80:60:49:69:6f:ef:3f:3c:95:66:99:d4:71:be:dd:16:fe:
         aa:d0:ab:f8:87:4e:6c:0f:49:47:b2:e7:ed:b7:fc:c6:2a:95:
         55:91:e4:95:29:c5:18:a7:02:7a:4e:71:dc:bd:21:ab:f3:b4:
         c7:69:65:d8:86:bb:fc:c2:20:98:e3:20:3a:61:21:df:2e:58:
         89:08:22:e9:b5:33:fb:07:19:34:d8:80:69:6f:24:91:2a:9c:
         37:38:6b:2d:8e:2a:27:df:c0:9f:7b:69:40:d2:e0:8a:89:78:
         3d:aa:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:02:56 2025 by rpki-client