Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
File:                     063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json)
Hash identifier:          x6z491qtZMBbh6ZqsydeKlcIepvCNsE5cWT8FpDRXmA=
Subject key identifier:   93:05:D1:5F:99:C9:82:B1:87:16:1F:05:63:B3:05:70:A3:28:ED:20
Certificate issuer:       /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Certificate serial:       010D0C9F4328584A7780863ED2E29245C2A1D200
Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     21922
IP address blocks:        2604:c040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:86:3e:d2:e2:92:45:c2:a1:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=b6cebe2a-8bf9-4d70-963a-8126fd13a892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:fe:db:b3:78:24:25:a5:4a:2e:87:c6:19:
                    91:9a:91:90:e1:c2:13:7a:07:13:29:cb:f9:c2:43:
                    73:bf:e8:9a:ed:bb:83:e4:e5:2c:d4:d9:34:53:09:
                    f9:ce:7c:50:9d:be:15:de:25:d5:e6:f0:17:95:50:
                    36:b8:31:30:ea:aa:1e:1f:64:f9:a5:a7:0f:9b:50:
                    21:e3:d5:a5:35:3e:ab:e7:3e:e5:1e:bf:87:07:45:
                    d1:fc:fa:e5:17:f0:1e:3b:0e:a6:63:2d:c8:41:9c:
                    10:ed:c0:62:99:e1:b0:1d:5f:f7:93:d6:69:57:9e:
                    e6:a1:8e:85:b0:b5:46:49:92:74:63:77:9c:5e:e1:
                    dc:08:13:62:15:2a:48:39:04:3e:5a:85:07:a0:f5:
                    d8:cf:5e:17:e6:e9:8d:8a:0b:97:88:0c:c4:4b:18:
                    4e:a2:17:a9:24:4c:e1:2a:24:a9:73:de:3a:22:c3:
                    db:bb:76:49:46:53:34:6c:c2:60:cc:40:3a:87:f4:
                    15:7a:30:de:d1:97:e7:15:0d:7b:d1:99:d0:74:8c:
                    9a:f9:c7:e7:28:41:4e:e6:c2:94:2a:9a:2f:3b:ad:
                    59:d9:24:77:19:b5:10:eb:5c:ed:aa:a4:ed:0e:b6:
                    c1:ca:ad:1e:a5:3b:a5:c7:ec:99:9f:50:0a:34:7a:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:D1:5F:99:C9:82:B1:87:16:1F:05:63:B3:05:70:A3:28:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl

            X509v3 Authority Key Identifier:
                keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ee:47:d3:20:b1:d3:7d:22:1e:11:23:71:1b:2a:dd:d1:cf:
         79:39:05:d4:77:bc:a4:94:f5:79:d4:18:d4:6d:a6:a8:0c:04:
         ec:b0:b1:f4:8a:10:e4:4a:9f:6b:0d:df:66:c6:03:6b:12:e1:
         56:9f:04:99:1f:77:c7:fa:44:47:ec:44:6a:b5:fe:02:5c:3f:
         92:a0:de:83:8a:da:f3:bd:40:10:0c:0b:bf:25:78:4c:8a:82:
         71:80:aa:9d:5c:ef:a5:8d:82:1e:ca:21:58:59:2a:66:54:5b:
         a8:29:2e:15:c0:22:e6:1a:6d:54:b1:fa:8c:64:fa:7a:58:c7:
         db:ad:aa:51:52:09:57:bf:85:53:43:44:62:a0:d8:3a:1c:00:
         e5:c0:ed:61:64:bd:1e:f7:3f:8d:99:ff:b4:53:2f:1e:6d:30:
         db:f3:c2:8b:a3:51:43:54:6a:f7:93:93:d3:ce:4f:1b:db:bc:
         48:a5:e2:59:19:74:93:14:b3:72:21:3e:ea:7d:3e:7d:75:ed:
         16:eb:b7:30:26:fa:e9:ac:79:95:94:68:03:3b:01:08:fe:d7:
         62:72:45:c2:fe:89:c5:c3:98:e4:28:8d:bc:94:28:a2:e9:f4:
         d3:96:62:86:f5:96:e2:cc:f5:dc:3a:1d:e3:fa:30:6a:ce:10:
         b6:5f:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:32:58 2025 by rpki-client