Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa
File:                     05b705f9-2747-319c-8d29-77e805edc6bd.roa (raw, json)
Hash identifier:          LJNhFXS1jomFmGpqogicYqwAdtkVqTsKXDpt499AGqc=
Subject key identifier:   D1:A1:BF:A6:27:17:8A:DB:B7:F8:24:1F:FB:95:79:4C:3E:6F:34:CF
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584A66C069C22F32C6245205EA80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     21957
IP address blocks:        2605:f440:5653::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:69:c2:2f:32:c6:24:52:05:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=f40547dc-8105-4dd0-b07a-f3a67a7ee7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:f4:c5:d1:32:e6:fe:6d:a1:8c:ba:ce:8b:
                    66:73:b3:9b:c4:90:2e:93:27:b7:db:8e:a3:22:68:
                    fd:df:32:fe:f5:3a:0c:7e:1c:3e:22:fc:25:cb:1e:
                    35:30:e2:75:e1:39:67:54:a5:dc:a1:30:30:2a:9d:
                    56:09:28:91:cc:1c:c3:7c:6e:40:d7:3e:c5:41:c9:
                    19:f3:68:2c:67:f9:7e:1e:87:da:23:fb:59:5b:5a:
                    01:03:1b:4b:a9:ac:c3:b7:75:01:ad:d7:9c:f1:2b:
                    bc:39:73:f5:b4:a0:9d:94:20:22:fc:2a:dd:ed:ed:
                    4e:ca:81:45:bf:f1:dd:f5:38:13:cf:a3:68:b1:cb:
                    7e:ef:c3:fb:f4:9e:60:6c:c2:d0:59:97:9f:c1:67:
                    d4:b3:6a:aa:48:17:6c:5c:23:41:cd:89:60:8c:4c:
                    98:4f:85:34:24:e2:41:8f:ab:c2:63:2b:21:78:d4:
                    05:56:7c:10:c4:86:bf:e7:17:08:5d:a1:7c:29:33:
                    5b:45:0c:c3:6f:c9:08:fa:8b:9e:6b:1e:7d:66:e6:
                    02:68:ae:e3:d1:59:b4:27:a1:9b:b2:09:8b:07:06:
                    5e:51:3c:3a:f8:d9:b4:d9:f6:59:89:3c:f8:c3:d9:
                    0e:f2:d7:d5:c3:da:3a:7b:2e:30:e0:12:c6:06:b5:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:BF:A6:27:17:8A:DB:B7:F8:24:1F:FB:95:79:4C:3E:6F:34:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5653::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:81:2f:70:84:0e:58:2b:8b:28:9c:a5:1d:c6:59:d9:2b:66:
         6e:ae:05:3a:75:15:1d:6a:0d:97:6a:56:06:3d:2c:99:1a:2c:
         03:62:33:a3:55:6b:14:35:c3:f9:92:31:a6:a2:4e:e1:68:33:
         1f:d8:45:fc:0d:5d:8d:11:c0:36:4a:2b:0f:8e:99:28:33:6b:
         b0:06:90:27:21:4d:34:d3:c9:91:19:2f:72:21:59:2d:bc:a2:
         fe:eb:65:fa:aa:14:49:e7:96:c0:b4:88:b2:74:4b:6d:d0:66:
         f9:94:6e:0e:29:bc:ec:16:bb:22:b1:58:b1:70:ae:e5:41:98:
         a7:95:ea:f6:b4:a3:45:0b:84:2a:83:89:43:44:f1:42:e7:76:
         05:59:9a:1a:64:6f:a6:3b:93:cf:c9:33:fa:ac:0a:1b:94:81:
         05:bf:ad:86:f6:69:cc:85:bd:47:25:18:90:12:4a:12:fe:90:
         75:34:60:94:f6:93:21:97:8f:12:50:dd:1c:25:ab:ac:ca:aa:
         6c:5a:89:2c:ad:fe:30:dc:72:c0:ac:83:99:2f:27:85:6d:38:
         ee:a5:7b:ec:d3:bf:3c:f9:4c:13:b9:c5:32:f9:e4:42:27:e8:
         87:6e:b3:18:c3:69:0a:7d:7f:8d:c4:22:59:b8:18:f1:64:e9:
         11:b7:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 18:31:08 2025 by rpki-client