Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
File:                     1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json)
Hash identifier:          05PSBvsmjWkRLuD3bXPUIsyQ4YvMKzdZV2QGUMvDWzI=
Subject key identifier:   08:A8:F7:F6:C6:95:FE:6F:77:1C:D7:C3:93:34:C7:D4:61:E9:0A:42
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584A655B30EEC7CAE732DB3E2F80
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     897
IP address blocks:        2620:ab:a000::/48 maxlen: 48
                          2620:ab:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:30:ee:c7:ca:e7:32:db:3e:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=60b7ba6a-d9e5-46bc-a5db-62fdf77f0fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:01:f8:b2:0b:9a:39:d8:6a:c0:0d:a7:b0:
                    0f:48:b6:ed:93:7b:f4:fa:5b:f3:8e:ba:d1:2b:9d:
                    41:db:9a:6a:79:7e:7e:10:4d:bf:af:e0:2e:12:be:
                    5d:b2:cb:f8:96:9e:fb:72:9b:e5:1a:ba:a2:63:4b:
                    f8:08:ac:8b:b4:fe:e2:05:4e:96:82:a0:3e:2c:f8:
                    19:41:92:22:9b:63:e3:c9:13:a7:ba:76:7f:c2:a6:
                    cb:2e:3c:8e:84:f4:b0:54:69:a1:8d:c8:54:f0:7d:
                    a0:4d:d9:ee:8c:ac:bd:21:c0:37:10:6e:50:c7:7a:
                    dd:2d:93:28:c8:c8:03:ac:aa:55:d7:26:71:79:2d:
                    08:af:fe:16:16:b2:4b:59:98:aa:97:72:39:2d:06:
                    03:b9:9d:72:d2:bb:fa:63:e5:13:7b:9c:70:0c:73:
                    35:fe:5d:52:36:a3:22:3c:3f:6a:e3:4a:93:a4:bb:
                    3e:62:82:83:09:7f:cf:94:83:5f:e6:31:1e:cf:a7:
                    6f:7b:80:7c:47:c1:90:aa:1b:11:1d:c6:6d:e0:a4:
                    0f:76:0d:6f:3b:96:ed:02:8a:21:26:93:85:19:4a:
                    87:e2:1f:05:95:fb:ac:a2:d6:6e:ff:38:9b:b9:ec:
                    62:aa:89:22:7a:58:9a:ba:97:f0:1b:ad:6e:15:da:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:F7:F6:C6:95:FE:6F:77:1C:D7:C3:93:34:C7:D4:61:E9:0A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:86:f6:6b:1c:64:80:f3:57:bc:d8:90:27:df:01:91:52:
         03:0a:b7:ee:e7:76:84:a5:6b:cc:a4:6e:7f:38:5d:3d:36:81:
         3e:ae:4d:d7:fb:2e:b8:e8:5b:17:44:36:10:80:d1:62:46:69:
         92:ce:ac:9e:e8:8f:60:1f:2e:f7:04:09:49:22:78:44:40:c4:
         49:d3:f6:d9:43:23:25:b9:e8:3d:bb:37:94:54:1d:8c:6d:9d:
         96:c0:30:91:f9:4e:ca:2e:95:54:de:20:ab:09:c1:b7:6b:e1:
         10:5c:20:16:e6:43:c5:58:06:d9:df:ce:09:9f:72:90:36:d4:
         a6:72:7c:ea:30:f9:44:73:05:fc:43:a5:7f:68:cf:9b:e8:d7:
         72:94:d2:5e:0c:5f:09:8f:0d:eb:4a:72:b7:a4:86:ca:e4:d9:
         ae:d3:b4:c3:9f:83:99:6b:da:7d:d7:ca:91:1c:b2:ff:5d:79:
         8e:7d:c3:99:a9:34:f6:a4:9c:4e:fc:55:64:17:40:44:4c:02:
         bb:e1:7d:f0:3a:48:c9:09:25:94:bf:4a:b1:ed:aa:5f:7c:55:
         b8:ad:53:fd:6b:c0:5a:e1:cc:8e:12:a0:c8:0c:d5:7d:c5:4f:
         aa:0b:73:1a:f0:b4:f2:10:e1:45:7d:23:da:bc:f8:1f:5c:d3:
         95:44:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:21:49 2025 by rpki-client