Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/ae990241-79d1-3ed0-84b5-7ef974772989.roa
File:                     ae990241-79d1-3ed0-84b5-7ef974772989.roa (raw, json)
Hash identifier:          wtrylm4DDLcOmaoImaBuTwf8ysltS29OETbPNB42ahs=
Subject key identifier:   D0:7E:DB:DC:C8:9E:D1:4E:B4:D2:F3:1B:75:DC:FB:D1:B2:E4:D8:4E
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F4328584A68260217716F1C5948AC4380
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/ae990241-79d1-3ed0-84b5-7ef974772989.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        2607:6d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:02:17:71:6f:1c:59:48:ac:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=1433a73b-ff6f-4705-a426-23b7fbf83c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:76:d6:a7:2c:ef:6f:1b:30:d7:2c:83:97:
                    2a:8f:0d:25:71:f8:71:c0:78:43:7c:8f:1c:f9:57:
                    aa:52:f9:f1:37:94:26:32:a1:9d:96:e4:0e:54:a0:
                    1d:45:f6:c1:7b:02:0d:0b:11:78:f4:4c:c4:af:b7:
                    23:99:f0:1c:14:93:48:db:62:21:f4:b8:8f:65:d8:
                    7e:cf:c2:2a:4c:d5:ab:05:42:a9:c6:5d:f7:7d:fb:
                    6b:d9:77:ad:c2:18:80:2f:76:b2:4d:33:45:1b:80:
                    72:9c:ac:73:0c:70:14:03:e0:9c:71:8c:83:c4:a6:
                    96:bc:3e:79:34:0a:ab:46:52:9a:7a:1b:58:6a:09:
                    58:35:8b:52:2f:a7:8f:a4:e5:df:39:54:44:7b:90:
                    3b:c0:d3:66:4f:07:73:2a:1b:1c:73:4c:e6:5e:8f:
                    d6:48:c4:9c:1c:6a:d5:26:18:bf:4d:e1:95:cd:bc:
                    a4:3e:d9:06:81:d5:d3:b4:ae:21:25:61:35:60:e7:
                    c1:d1:ee:38:09:f9:bc:e0:f7:77:2a:5c:1f:44:8b:
                    b7:f6:e0:b4:54:aa:74:ba:ba:41:40:74:73:92:af:
                    7b:56:a4:a4:1e:d3:40:11:53:ed:f6:df:92:f5:b5:
                    66:53:25:12:1f:58:e9:86:37:eb:d3:57:49:0d:29:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:DB:DC:C8:9E:D1:4E:B4:D2:F3:1B:75:DC:FB:D1:B2:E4:D8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/ae990241-79d1-3ed0-84b5-7ef974772989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:82:77:47:0f:60:23:66:9b:73:0e:17:eb:87:62:e9:43:7c:
         a8:ea:94:e2:a8:28:f7:75:ea:91:bd:27:2f:ad:d7:51:5c:6d:
         00:df:23:ee:4f:b0:c0:12:bc:17:cb:c0:62:60:7e:99:cb:ad:
         07:ba:93:be:38:a9:36:cb:86:81:1a:a3:8b:de:25:84:48:de:
         2b:11:5b:63:84:3c:46:0b:40:a8:4b:a0:02:fc:ff:1c:0d:6f:
         ff:8b:ca:32:67:46:54:da:fa:fe:96:19:74:8e:03:d2:42:6a:
         35:4e:1e:40:9d:5c:ed:fa:44:7b:94:51:28:5e:87:56:27:25:
         ae:62:14:28:10:db:58:15:7c:39:fc:0c:4b:52:b7:17:67:2d:
         a5:f0:d5:14:b6:f7:e3:18:2d:45:0a:a3:bc:a9:76:0e:b1:51:
         bd:a4:38:e5:d9:22:80:db:43:fc:cd:da:a6:d7:46:40:46:c0:
         bd:04:7c:b2:c6:a5:18:a0:c6:ab:4b:a4:20:b8:d4:46:f6:fa:
         15:b2:cf:11:4a:0e:ac:da:60:27:20:cc:cb:a2:3a:5a:07:d7:
         73:d0:82:43:9c:9a:ef:8d:a7:fb:c8:19:d1:b4:bf:c8:50:54:
         80:15:f1:c5:5f:fe:8d:8b:8d:2f:2d:22:dd:7f:24:e8:0b:1c:
         45:fe:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 06:02:19 2025 by rpki-client