Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
File:                     cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa (raw, json)
Hash identifier:          3UjDX6gIorTqOgoBoBZ7ajwoLFDDYM29I383XkGQkzY=
Subject key identifier:   71:73:ED:8B:7C:48:19:99:EF:8B:A8:52:93:07:C8:99:36:F4:E0:0E
Certificate issuer:       /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
Certificate serial:       010D0C9F43285849EA8518133CE87AFDE0110C80
Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     203
IP address blocks:        2606:5cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:18:13:3c:e8:7a:fd:e0:11:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=40a020d7-4f65-42bb-82e0-7003c2f296bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:ea:7c:0f:da:a0:5e:31:1e:09:f3:39:37:
                    d8:2e:4f:2f:ed:c8:dd:fe:8e:69:d7:03:ca:a7:d0:
                    37:76:cc:51:d5:2d:98:96:27:52:1c:7d:48:39:d2:
                    cf:be:a1:dc:7a:75:c1:41:a2:2c:2f:32:59:95:65:
                    04:e9:25:09:4e:7b:63:a0:cd:e7:9e:61:64:58:65:
                    54:0b:93:39:e5:b3:ce:a5:e4:bd:49:7a:2d:63:7a:
                    84:ea:f7:e0:c1:b8:6f:8e:95:dc:59:57:e0:50:e2:
                    51:0d:80:56:d3:ee:2d:7a:f3:0a:aa:d4:4d:90:5c:
                    97:93:78:22:df:a6:b0:f5:df:72:9d:21:5f:80:df:
                    65:7c:cc:08:d6:2f:b2:b1:72:87:2c:97:93:d1:e8:
                    54:8e:8f:86:ee:fb:f6:11:a1:31:c7:de:8a:08:d0:
                    e8:63:cb:c7:6b:62:61:80:0d:83:16:d2:b9:21:c4:
                    a1:b1:97:1d:63:ac:dd:3f:9c:1f:67:37:bd:3a:1a:
                    66:b7:e5:97:0d:a3:ba:b1:16:3a:ab:dd:f0:e0:86:
                    bb:06:0e:c7:3c:1d:2f:d6:87:23:6e:08:eb:9d:bb:
                    48:b3:0d:49:23:d1:34:23:2c:0f:da:27:68:02:aa:
                    7c:56:7c:85:83:13:f9:9d:12:b1:63:d7:8b:98:2a:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:ED:8B:7C:48:19:99:EF:8B:A8:52:93:07:C8:99:36:F4:E0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl

            X509v3 Authority Key Identifier:
                keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:7f:dc:de:ec:93:35:68:a9:7a:8c:33:64:51:f4:c5:b2:
         a1:7e:2f:23:af:22:d1:39:fd:51:28:48:46:3b:2b:b5:d1:f1:
         13:15:20:13:64:ee:20:49:3c:35:37:f3:0b:ed:9b:3d:9a:a1:
         c3:3d:ce:f1:d0:4f:71:d0:48:2d:b4:b9:3c:d4:72:0d:6c:f4:
         0a:d1:0e:db:3c:d6:37:3c:69:46:e9:6f:5e:bc:1b:3f:ef:db:
         cc:78:2a:55:11:bf:68:79:4f:a0:c2:a7:b3:22:7c:e5:fd:69:
         94:b9:e4:85:f1:69:d9:c0:72:be:ec:4f:a2:b3:f1:b5:89:a8:
         4a:fc:78:b2:54:27:ec:e0:38:e2:f5:0d:63:66:6f:74:17:b4:
         86:44:ad:d9:37:ea:83:ea:3f:4c:b5:f0:68:e7:ff:e6:ab:7a:
         ac:4e:03:b3:18:54:fa:36:00:3a:bc:10:23:01:1f:5c:20:cb:
         cc:fe:ea:f4:db:31:86:8f:26:a9:3b:4c:04:93:73:2d:8b:79:
         c6:67:c7:a8:dc:e0:00:3c:4e:2c:c5:bb:1b:68:0b:23:3c:37:
         91:7a:05:ed:6a:0f:ad:b3:34:78:5f:5c:43:d2:1a:d0:f7:d8:
         7d:6c:89:ae:d7:e1:49:d9:3b:cd:00:b7:de:11:21:d0:a5:e6:
         8f:31:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:48:58 2025 by rpki-client