Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
File:                     0af64934-80c9-35d5-b6ce-25606aa12a02.roa (raw, json)
Hash identifier:          /58TiK6Tns1D12jK7oPU+16oBRr3/KoBP5AtkE4cWGM=
Subject key identifier:   1E:87:E6:44:AE:BC:64:1A:7B:9C:2F:07:6B:E2:EB:5B:CD:9F:84:E3
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584A7085F4043687259E9FEAB270
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     19740
IP address blocks:        2606:1b40:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f4:04:36:87:25:9e:9f:ea:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=f4de2e34-bd5b-432e-8fb8-c578c5b4da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:b7:ae:4e:da:c9:bd:98:aa:d7:15:81:46:
                    4c:77:71:cd:7d:fb:d1:52:4d:37:5d:88:51:74:23:
                    28:cc:5a:17:4d:54:ae:79:96:24:a7:ac:7d:d6:6e:
                    c1:3b:02:95:01:06:ed:e0:6a:c1:04:31:58:1f:7f:
                    df:69:52:85:61:2a:ec:9b:31:f4:db:83:41:14:e7:
                    63:06:b8:79:75:bd:c3:2c:1d:48:1b:09:5f:a8:f1:
                    11:f6:0d:da:b2:e7:9d:4e:85:28:f4:47:97:13:df:
                    72:e0:15:db:46:18:54:72:c4:a9:43:89:bf:ad:fa:
                    c2:d6:2a:39:1a:02:59:36:4e:94:5f:62:17:64:73:
                    71:89:fd:63:f3:97:de:66:a7:b9:64:2a:45:55:ee:
                    07:e4:c4:fa:43:0d:9f:fc:a8:35:44:11:6e:5b:bd:
                    b9:f3:78:99:32:b4:8c:f9:6d:ec:1a:27:49:6c:ca:
                    f9:c8:54:46:e5:e1:62:7a:e2:1c:31:06:ec:3e:fb:
                    51:f5:e7:2d:de:90:dd:74:39:77:61:99:dc:78:58:
                    92:c9:9f:ba:2b:30:b8:50:5d:2c:5c:22:92:0c:6f:
                    76:64:4e:5b:3a:25:bf:97:0a:da:cd:b6:31:a4:46:
                    5d:a1:b5:b3:03:c5:9c:0a:13:a8:ba:10:88:4a:1f:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:E6:44:AE:BC:64:1A:7B:9C:2F:07:6B:E2:EB:5B:CD:9F:84:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:36:99:10:be:3f:d9:e8:75:56:98:cd:89:b1:37:86:e9:58:
         88:29:80:40:b9:25:31:a2:9b:23:0b:a7:32:43:b7:6d:f5:cb:
         72:e3:dc:d9:13:15:a8:d9:4e:57:0b:9f:22:a1:c5:95:28:11:
         1b:3a:6f:2b:77:67:af:0c:09:9a:35:a7:63:12:d3:53:20:8f:
         2f:a7:72:67:ac:8d:be:49:37:5c:05:7f:ae:13:e3:b2:f8:5d:
         cc:08:0e:d4:33:1a:f6:30:de:af:b5:81:b6:3d:03:fa:3f:ac:
         40:ee:ea:45:05:be:cb:7d:3e:bb:0e:76:34:82:6a:9c:f7:4b:
         cd:56:12:2f:2b:43:a3:f0:5c:1b:e3:8a:0c:de:e6:30:23:ca:
         43:17:6e:43:f8:75:d9:03:3b:90:87:f1:a7:30:b1:3a:72:a9:
         d6:64:63:63:9c:2a:01:39:e8:65:a6:be:9c:a2:b8:a2:9b:3a:
         b7:ea:11:61:cf:ae:c5:68:11:b3:79:63:14:30:1e:cc:17:de:
         99:28:f0:14:76:39:c4:26:d5:28:ff:04:fc:b1:2d:7a:ce:6d:
         52:03:62:35:3a:9f:a7:40:e9:54:bd:52:1e:4f:ef:46:d6:5d:
         ff:87:65:9d:1d:41:c2:04:64:9b:34:ee:51:ca:00:f7:3a:6c:
         e1:04:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:31 2025 by rpki-client