Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/b00413b9-b277-3179-b719-1e0981fab996.roa
File:                     b00413b9-b277-3179-b719-1e0981fab996.roa (raw, json)
Hash identifier:          ZH2Lx+ttz5cQ1RZHKLyMM9OUz/g+tF9H01N20RstsRE=
Subject key identifier:   89:6B:DD:DA:8C:22:26:E4:33:D0:55:77:4D:5E:1C:EB:FA:92:D9:4D
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584A103549FCB2AA16883D83D780
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/b00413b9-b277-3179-b719-1e0981fab996.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     22192
IP address blocks:        2607:2240:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:49:fc:b2:aa:16:88:3d:83:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=823ddcf0-88c2-4d35-b98b-82bdb1253251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:e2:6c:f6:06:b1:cb:bc:2d:29:a4:ea:6f:
                    a5:07:52:0b:39:56:4b:db:2c:da:ad:1f:b1:6f:b0:
                    14:dc:6d:ba:6b:ad:4b:d5:0a:95:8f:2a:fb:e1:09:
                    87:24:9b:e2:74:44:0c:31:77:c7:29:4f:fc:a6:0d:
                    e4:e6:3f:2b:c9:bb:80:7f:69:3d:47:e5:8d:27:d3:
                    6e:05:82:00:8c:63:bf:da:56:84:d2:9b:c1:00:e3:
                    b7:8c:8f:df:e1:49:ae:e7:be:e5:c0:96:d2:51:82:
                    b3:86:be:5d:80:11:f9:3a:c1:bc:c2:67:a8:90:cb:
                    82:86:33:7b:e9:36:cb:ac:02:82:f8:06:39:04:76:
                    69:d5:9a:d2:50:32:32:fd:a5:49:55:74:c5:19:ba:
                    7b:6f:a7:3d:c7:a2:9b:9c:20:b1:d8:9c:84:a1:fd:
                    91:b1:9e:bb:b5:15:10:e6:12:a8:0a:0d:be:02:00:
                    b6:cd:25:d0:16:2e:fe:5c:3a:61:34:e1:4c:25:27:
                    8d:35:3e:0f:47:48:80:b2:13:4d:90:a7:78:c9:85:
                    87:14:e9:df:c6:9c:0f:ad:77:01:df:4a:21:f1:0d:
                    ef:12:d6:87:48:2e:18:c9:f6:eb:d3:f1:d9:ae:40:
                    37:f1:58:a2:f5:de:1a:b8:d3:7f:2f:0a:3b:de:2d:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:DD:DA:8C:22:26:E4:33:D0:55:77:4D:5E:1C:EB:FA:92:D9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/b00413b9-b277-3179-b719-1e0981fab996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:cf:83:76:89:0f:64:c3:bd:91:ca:06:1b:86:48:48:a1:
         10:b1:31:e9:bf:28:97:7a:3f:4b:cb:a5:e6:9a:1d:37:1b:0f:
         ec:79:92:b1:f3:67:62:99:58:cd:a5:97:55:85:5c:c5:38:c1:
         59:cd:3a:96:0c:72:2d:11:b7:92:05:b4:a7:27:a5:83:24:94:
         da:f5:08:c4:09:f5:7a:58:5d:43:8c:f9:a6:5f:99:b1:52:e2:
         2e:a4:31:0c:06:2b:69:7d:88:f2:a5:8a:95:38:78:1c:5a:ab:
         04:e1:d4:ed:70:c3:e8:18:00:07:c9:0d:e2:d7:45:7c:e2:4c:
         3b:4a:34:1b:59:6a:23:26:83:4b:57:01:3f:29:b1:1e:16:c4:
         d3:ff:9d:1e:eb:ab:65:74:d0:5d:79:7c:78:8f:8e:00:33:f9:
         83:eb:18:19:ca:a8:93:24:11:97:cb:16:fe:2f:db:ce:af:34:
         a8:cc:16:33:11:20:5f:a2:f6:23:5c:24:78:8d:2d:31:89:8c:
         f3:c1:f6:a8:cc:50:76:e1:d1:5d:95:70:bf:69:57:b5:38:ec:
         a6:36:5f:43:46:6b:62:0a:ce:f6:d1:33:e4:27:6b:62:e6:b1:
         34:90:70:b1:4a:8a:b2:ed:13:6f:a4:c4:95:74:08:31:11:0b:
         28:ca:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:03:41 2025 by rpki-client