Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
File:                     ccc01a9a-613a-39d0-9585-0e61958db9f6.roa (raw, json)
Hash identifier:          0XA2SFlTXn65OAsa72mW/tgVXIUSQDfPlNkagaJ/tF0=
Subject key identifier:   F2:8C:10:EA:C6:C9:FE:71:33:4F:99:35:9B:3D:53:BF:9D:78:42:5F
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285849DF5A5DFD2953634AED3D3A80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30698
IP address blocks:        2620:11c:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5d:fd:29:53:63:4a:ed:3d:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=cb9f666f-18c1-44ac-bfd0-dc2fa9bd4a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:7f:2b:d7:0b:ab:80:39:c4:ce:e4:9a:33:
                    2f:14:f3:11:db:59:12:59:4a:2d:bc:a5:f5:52:91:
                    1f:b9:4d:00:f3:21:16:1e:b3:3c:f6:91:c4:4e:2a:
                    3a:1a:d4:e0:e3:e2:32:d3:ed:e3:a2:54:b8:64:ff:
                    67:21:c8:81:a7:b2:71:0f:93:f1:26:32:75:60:1c:
                    89:b8:5c:be:30:c6:91:ed:52:5c:01:cb:34:28:d9:
                    87:22:d5:e7:a7:5c:eb:7c:07:71:66:29:03:f4:b6:
                    55:02:15:32:a1:57:ab:f4:75:dd:26:dc:87:db:ba:
                    d4:ca:54:be:03:2e:78:35:13:4e:c5:73:18:7a:d3:
                    9d:5c:74:3a:5a:83:07:81:8e:37:97:f6:49:68:5b:
                    be:68:d0:0e:26:17:e9:22:3a:fa:90:43:e7:fd:44:
                    f9:47:89:bf:4b:73:35:8c:be:ed:f0:cf:73:7c:2d:
                    aa:44:8a:26:e2:a3:5f:a9:29:0b:25:f7:a3:71:61:
                    91:62:fd:ba:55:cf:f3:e1:8c:22:1f:85:97:fa:df:
                    af:4f:c7:85:b7:44:22:de:d8:6f:1c:46:36:fc:2e:
                    2c:28:76:b7:35:d7:05:33:ee:c7:7c:9f:b5:8e:6e:
                    f0:ae:88:4e:34:39:84:7c:5f:3f:3a:de:41:78:3e:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:10:EA:C6:C9:FE:71:33:4F:99:35:9B:3D:53:BF:9D:78:42:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:ae:05:45:56:bf:18:3f:c1:d8:a8:91:6d:1c:76:ed:c6:f9:
         2c:48:c2:6c:0d:2a:cc:b2:f0:00:d0:f3:ba:4e:b5:07:e5:a4:
         5b:12:88:1a:de:bf:14:3f:f1:c7:4f:c9:bd:2d:bf:0b:6e:f3:
         1e:e6:21:09:66:93:16:f2:89:ee:a7:8c:8d:2b:36:1d:f5:a1:
         e2:cc:63:ea:c1:cf:55:2a:5e:76:96:97:43:21:60:19:43:03:
         90:7c:1d:c7:b4:61:85:81:e3:2f:51:1c:ac:f4:58:11:ac:f2:
         b2:44:98:5e:bd:ce:50:20:49:2b:86:2c:05:3f:d5:da:46:99:
         bc:f2:ec:26:17:32:6e:b0:ba:7d:90:9a:15:ae:2a:a6:2a:99:
         f4:a2:f8:f0:71:b8:41:ce:0f:13:b2:d7:19:4f:bf:60:1f:f0:
         d7:ca:c3:c0:95:bc:f5:af:85:88:76:81:24:2a:3f:71:b1:b3:
         7a:d8:32:f2:77:66:15:d3:9a:7b:80:b7:3d:b9:ff:74:86:a2:
         4d:b5:17:18:9d:55:08:be:f0:d2:44:2d:5b:b0:aa:61:eb:cf:
         d4:3a:48:c5:36:4f:e5:8e:2c:82:8d:21:b3:ed:7b:ed:e5:37:
         1f:e3:ec:51:ff:76:33:a9:c0:02:c4:67:a0:d3:88:9b:e6:12:
         50:43:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:53 2025 by rpki-client