Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
File:                     634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa (raw, json)
Hash identifier:          T9VQGiLkQ65vA8DCUoa811ZYbH6qmTBQI3m2pJoi9CU=
Subject key identifier:   AA:C5:9B:92:37:53:19:0B:78:D2:65:3F:BD:0D:73:3D:CB:1B:E9:75
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584A655B3178704009977DC743A0
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2620:ab:a002::/48 maxlen: 48
                          2620:ab:a003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:31:78:70:40:09:97:7d:c7:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=5800051e-1ad0-45e1-b202-131b5e0793cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:7f:9b:18:ee:1d:a4:02:60:ba:ea:23:f3:
                    bd:a2:80:42:50:af:60:9c:32:18:23:20:7c:87:e9:
                    b9:40:01:ca:4d:b3:36:05:7c:50:88:f3:ac:da:9a:
                    fc:52:75:f3:1e:b1:31:e0:d8:f2:cb:85:54:0f:d5:
                    85:88:01:18:36:84:31:f9:18:78:0c:1c:12:71:86:
                    ed:2f:44:ae:ae:4b:11:1e:16:21:10:c4:fe:73:a2:
                    28:bc:4e:1b:12:80:dc:47:ff:f7:36:da:6b:79:7b:
                    86:de:19:af:a0:db:bf:7d:eb:ab:b9:85:7a:82:14:
                    e3:21:5c:74:f8:20:60:61:13:61:81:9e:84:cd:8a:
                    ae:0e:96:21:9b:58:83:67:82:8c:2d:00:11:f8:d2:
                    f9:3b:79:75:ee:c2:41:97:09:53:63:12:67:32:1b:
                    5c:5c:fe:f7:53:ee:54:8d:2c:50:d1:6b:35:0c:d9:
                    b9:bc:e2:a8:8c:d9:3a:42:c1:c7:f1:e5:d6:43:8a:
                    9b:8b:35:1d:6a:c4:9f:3a:71:f4:08:db:3b:60:f5:
                    20:f1:bd:8d:de:6d:4b:af:b0:b8:86:bb:d6:6d:28:
                    3f:d6:ad:58:27:8a:79:60:f3:8c:e2:bd:6c:7e:ca:
                    47:69:c6:dc:27:ee:8e:4f:ef:bd:98:56:78:fd:78:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:9B:92:37:53:19:0B:78:D2:65:3F:BD:0D:73:3D:CB:1B:E9:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:11:c5:d4:36:e4:c9:18:6e:44:34:e6:79:1a:32:aa:95:17:
         30:20:c1:04:a5:36:f5:ee:52:5c:f7:33:ab:5f:bb:dd:03:8a:
         c8:65:8e:0f:ac:7a:4b:d5:7b:59:c1:1c:10:fb:67:80:5b:87:
         3c:14:c2:7a:a0:36:63:89:ac:2f:4b:6b:db:80:bb:b4:7d:10:
         0b:07:e2:ae:e4:a6:7e:df:44:ae:7e:7b:1f:d3:58:a4:5a:f9:
         df:44:a1:50:c6:fd:f0:8e:9e:f6:83:e4:33:e0:6c:6c:3d:85:
         61:85:ba:cb:69:33:d9:07:ab:bb:c4:25:3c:87:d1:a8:54:39:
         10:93:32:10:58:a2:81:33:00:18:16:cc:fa:d2:5f:d5:89:ab:
         84:80:25:9f:9d:38:55:c3:a8:bf:c8:30:e1:81:5d:1e:47:f2:
         2a:96:75:5a:d2:82:7c:8d:30:68:bb:ba:98:ab:ea:36:e9:c0:
         4d:a9:af:53:75:b9:27:63:3e:db:a2:f5:21:d9:b3:a7:6d:68:
         09:3a:e7:d4:3b:4e:4d:b4:45:d5:c0:30:fe:1a:f0:48:85:0f:
         a9:5b:15:2e:70:19:3a:96:7b:cf:ec:90:e0:02:8b:db:d8:73:
         f8:98:3a:0a:8d:ae:2f:3d:9a:a5:2d:f3:a7:8a:25:6f:89:b1:
         8f:e1:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:50:27 2025 by rpki-client