Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a54ecd4e-20ad-3504-9e3a-b3f71db9f902.roa
File:                     a54ecd4e-20ad-3504-9e3a-b3f71db9f902.roa (raw, json)
Hash identifier:          XhPEvpq21fMi8jdkvVta/8IGpc6PimYf7EbMQMqhRxc=
Subject key identifier:   A7:E2:6A:BA:98:FD:EF:02:E8:18:D4:5E:3D:A1:01:DE:FA:D5:93:0F
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584A103549EF22A87F2045E44040
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a54ecd4e-20ad-3504-9e3a-b3f71db9f902.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     398850
IP address blocks:        2607:2240:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:49:ef:22:a8:7f:20:45:e4:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=56283a8c-3c94-4abb-8ab2-7ef63081a441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:df:a6:b8:9b:d4:64:ef:b4:de:41:d9:e4:
                    20:bb:fe:9d:ad:f6:a4:f9:e1:f3:25:90:0b:77:40:
                    0a:87:c7:9d:e5:f7:ea:25:56:12:bd:71:fc:45:87:
                    fe:a0:91:0a:d4:40:af:00:0a:13:93:0d:bf:86:0c:
                    bb:a4:22:43:ef:82:8e:39:44:31:c5:e7:e9:76:3d:
                    41:bc:81:67:23:14:2d:cb:bf:83:6a:09:7c:63:44:
                    8e:ef:10:18:43:41:81:b9:31:93:a2:c3:00:12:52:
                    e4:4c:97:36:1f:07:22:46:1a:a4:ec:89:45:0b:bf:
                    e8:8c:3d:62:ba:16:7f:b6:31:39:b7:ef:8d:61:43:
                    0a:8a:ab:3f:bb:09:93:5f:13:33:cf:7b:53:03:8a:
                    e9:49:aa:bf:30:c7:22:0e:d3:b5:8b:59:27:ee:67:
                    41:86:73:26:0b:ab:7d:92:47:10:78:1d:85:37:f7:
                    f1:3e:9b:c0:3a:67:eb:f7:77:85:0a:c0:9a:46:b2:
                    33:be:90:fd:89:58:d8:5a:1f:8f:12:0b:34:a6:82:
                    ed:d5:26:4f:ff:16:93:6a:89:91:b9:08:e9:6a:8c:
                    6d:19:c0:f2:3d:3e:33:84:dc:7f:e6:5d:2f:03:96:
                    3a:9d:e4:5d:84:f3:0a:be:e6:37:d7:8b:c2:85:1e:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:6A:BA:98:FD:EF:02:E8:18:D4:5E:3D:A1:01:DE:FA:D5:93:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a54ecd4e-20ad-3504-9e3a-b3f71db9f902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:02:d3:d3:43:3f:2c:38:06:cf:c9:29:44:51:0b:1b:92:
         0e:ab:7d:f8:2f:50:9d:33:48:e0:2f:07:53:38:d0:3a:a1:e8:
         eb:37:40:cc:cb:de:84:1c:2e:2f:f1:c1:01:e2:a2:4f:2e:7a:
         1b:f3:2b:fc:19:78:6f:17:bb:46:04:c5:5a:94:40:15:00:06:
         00:d1:11:70:13:03:a3:68:88:18:f8:67:90:5b:2c:1e:0d:7c:
         2f:9c:a9:e1:6c:a5:50:39:ce:0e:87:c8:16:38:dc:43:92:1a:
         22:76:65:91:e9:89:a7:40:01:b0:d5:29:d6:32:95:3e:18:96:
         4d:64:b2:f8:9e:c6:09:2d:90:fe:47:18:ac:75:de:1f:d8:d6:
         e4:26:c4:8f:33:3a:0f:3f:b3:f9:d1:33:bc:ae:0c:42:88:31:
         d8:3f:fd:b4:32:f6:40:79:c2:2f:7a:67:9e:77:90:1e:4a:c7:
         dc:fa:09:62:00:cc:8c:53:cb:b6:65:29:f0:e8:53:ba:d5:49:
         2a:a8:c7:49:ca:1c:9e:8c:28:ac:12:5b:90:3f:5e:53:f9:06:
         cb:ce:d9:8f:1d:78:63:b3:ec:e5:3e:cb:43:f0:72:c9:1a:7c:
         39:ba:52:e8:7a:de:c0:3d:c3:09:79:37:7c:61:12:3a:d3:86:
         ae:46:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:36 2025 by rpki-client