Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa
File:                     df490bd0-0779-3f5f-bb40-4a405208be8e.roa (raw, json)
Hash identifier:          MykqhbDuc71lOYZkFIhV6aN4qOyaVb+5vQRTEnbiWQY=
Subject key identifier:   ED:00:0B:7C:83:AD:27:F2:44:EF:9B:D0:E4:78:D0:DC:F4:8E:D3:B9
Certificate issuer:       /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial:       010D0C9F4328584A49705758A50D12270DE4EA00
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     32913
IP address blocks:        2606:c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:57:58:a5:0d:12:27:0d:e4:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=22630160-c7b1-4d97-9a55-a7d97ccdcf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:3f:e4:a9:43:af:e3:83:4e:50:a2:6d:70:
                    db:f6:3d:66:25:c7:95:2d:33:2c:ca:90:31:f0:5f:
                    b9:82:74:dd:d8:29:7a:e5:a3:70:e3:c7:32:96:81:
                    fe:70:0b:df:2e:24:b5:50:2c:8b:96:5d:31:7f:07:
                    26:c3:29:e1:bb:a8:97:2e:10:35:6a:2c:bd:d7:0a:
                    de:08:c2:b3:f0:f7:97:25:56:fc:d0:cb:ca:c8:e3:
                    ac:f8:96:84:1f:68:09:05:11:1b:bc:be:bb:02:33:
                    a9:87:b1:c5:d3:8c:50:82:7a:d9:a0:2f:78:44:a4:
                    3d:7a:f6:6c:cc:ec:f1:4d:b3:ef:90:fd:de:61:28:
                    4e:ad:2c:7e:32:d2:39:4e:c9:60:b8:ac:7c:7e:3f:
                    4f:42:7f:0b:aa:95:9a:83:91:ba:31:17:bd:e8:86:
                    6d:ba:3b:06:bd:fa:65:45:42:d1:ed:9c:48:69:c4:
                    f1:1b:c5:26:67:1b:87:96:39:50:97:5b:1b:98:92:
                    a7:d9:44:a5:79:70:8a:bb:27:0c:8a:be:b7:7b:d4:
                    e0:d3:c0:c8:f2:1f:40:1c:f9:1e:2a:cb:68:0c:26:
                    b2:2f:a5:38:5f:f3:16:db:44:38:67:67:ca:04:78:
                    13:a2:30:0c:ff:94:fc:b5:c6:c5:3f:0d:82:9f:b6:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:00:0B:7C:83:AD:27:F2:44:EF:9B:D0:E4:78:D0:DC:F4:8E:D3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl

            X509v3 Authority Key Identifier:
                keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:5d:49:43:b1:3a:d5:f1:4a:de:cb:39:8e:b7:9e:9c:b0:
         51:76:2a:ca:12:08:4b:0c:a5:d8:5e:b3:e5:10:8f:6d:a0:f5:
         59:31:3a:84:04:d0:84:9f:3c:7b:d1:84:77:8e:fd:7e:a0:84:
         3e:e5:bc:59:1a:f7:f3:bd:a4:33:0a:62:54:12:14:86:95:79:
         2a:5b:9d:03:47:85:da:42:8f:2d:6e:ed:d6:83:18:0f:e6:89:
         af:e6:50:9f:15:8d:50:2e:01:6f:4b:81:1b:af:62:39:f0:4a:
         01:90:3b:8c:cb:d9:0b:fe:d4:ac:47:24:d9:41:05:d8:33:04:
         e1:e6:0c:0e:51:8b:51:c0:1f:dd:73:27:30:f7:ea:0a:84:03:
         90:e0:51:81:c3:af:02:87:69:e7:63:8a:6e:94:23:d4:98:02:
         4b:cf:f2:1c:c6:08:7d:66:ee:4b:75:3c:bc:e2:0b:d6:ba:c4:
         6f:70:07:31:71:70:dd:9f:30:90:df:2d:06:73:66:06:4e:d7:
         3e:b5:3c:3c:9a:4a:80:a9:fa:8b:5b:d9:e4:c3:ee:64:73:19:
         a4:66:2d:7f:54:ea:ae:94:23:7a:60:e6:43:2c:f2:64:30:d9:
         51:07:cb:78:21:b0:cf:0e:7d:6d:89:20:d2:32:33:81:14:c4:
         53:5c:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:18:51 2025 by rpki-client