Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa
File:                     a7b3c84a-fa39-34b0-8984-f20212f89532.roa (raw, json)
Hash identifier:          jUAZatUZV0JJzrOokZzXnohdm5AuqU8r/1SDm1pjaH8=
Subject key identifier:   E1:3E:3E:9E:5E:8C:67:8B:EF:97:C1:66:42:38:E8:04:AC:40:59:02
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F71530A712890EC0C5DE3880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        2606:4700:e0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:30:a7:12:89:0e:c0:c5:de:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=6682e887-69f3-4778-850f-64ad404c7ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:c2:fa:73:6e:8f:6c:bf:ab:3b:a7:78:46:
                    dd:1b:2a:19:d8:3b:91:3e:2d:1d:ef:31:2c:c4:05:
                    1b:5f:c4:42:02:a7:db:69:92:74:0b:d0:9e:3b:9e:
                    c9:e3:1d:48:67:e8:3a:71:a7:bf:d9:83:d5:56:31:
                    d8:e8:39:96:f1:b2:ef:fb:6f:71:d6:5b:6d:8d:07:
                    c5:70:8b:6b:83:0f:1f:df:90:ab:24:a6:a7:1a:98:
                    d8:e5:fd:5f:88:0a:89:3c:15:4d:63:53:58:a7:3d:
                    f4:7e:dd:04:c9:a5:dc:fc:1e:96:36:e1:30:dd:ad:
                    ca:24:ef:f8:c1:21:bd:a7:54:03:5f:53:a6:ea:3e:
                    d8:d9:0f:bb:bf:06:35:75:be:20:c4:f7:66:59:13:
                    fa:5c:8e:bc:ec:cd:ef:be:41:43:94:79:49:83:23:
                    c9:da:09:9a:ae:79:42:a0:61:e8:1d:ef:38:73:8d:
                    98:d6:2a:44:b2:d9:81:1b:c6:a3:91:b7:c7:03:5a:
                    87:84:6f:b6:ed:c0:35:4b:f7:72:12:73:84:da:f5:
                    96:a7:9f:8b:41:45:eb:fc:bf:ea:13:22:1c:18:fa:
                    01:0a:de:45:a4:06:ab:74:14:1a:24:88:34:cd:a2:
                    57:d0:c9:73:e8:d4:ab:31:4a:38:ad:66:35:d9:85:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:3E:9E:5E:8C:67:8B:EF:97:C1:66:42:38:E8:04:AC:40:59:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:e0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:78:77:c4:db:aa:8a:f4:4c:2c:53:77:38:d6:b4:2b:43:
         42:cc:cf:c5:98:1c:b8:92:5a:86:e3:45:ec:87:35:7f:aa:ce:
         17:2c:a8:a8:fa:4d:0a:64:92:48:7c:d5:41:4c:e3:5a:55:27:
         4d:37:95:53:29:c0:b0:97:d8:83:ac:ee:47:0d:8d:de:c2:e3:
         fb:a0:76:5a:9f:6d:3c:ff:8c:91:b4:74:2f:1d:70:5c:e8:64:
         53:56:cd:5a:ce:ec:33:03:d5:83:f1:7a:c7:21:e9:3a:11:67:
         ff:b5:6b:43:a3:f8:12:03:2d:24:3f:b2:cf:4f:51:a7:66:6a:
         33:97:f9:43:5d:f2:20:b9:a5:d2:d7:11:4d:d3:bd:d4:f4:ab:
         6b:25:89:4e:e4:6c:81:28:53:fa:ac:51:81:ad:a6:a8:92:25:
         15:54:68:1a:a0:21:b8:63:22:b1:fd:33:f2:2c:3d:5f:22:23:
         5f:6c:39:54:18:1b:d4:40:c4:a9:f2:37:05:45:a6:4f:1e:a2:
         ac:be:4a:ff:17:9b:d4:56:cd:d8:fe:71:68:1e:9d:6a:1d:e7:
         59:22:ad:5a:50:83:7f:ac:df:df:76:01:11:1c:83:16:d6:8c:
         b7:f9:48:93:7d:0e:2d:d4:0e:05:24:90:b5:92:63:72:08:a0:
         41:36:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:30 2025 by rpki-client