Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa
File:                     a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa (raw, json)
Hash identifier:          9kt8RxDmIVOhp3u6e67O/+nqgDJOfERKekrFPm3bv9Q=
Subject key identifier:   37:D0:21:F1:34:95:86:A8:C1:69:1D:62:6C:A4:72:5F:FE:6F:1D:3D
Certificate issuer:       /CN=929275f0-3197-4a70-8b27-8fff75b6e7b9
Certificate serial:       010D0C9F4328584A6DBB3F5A0E01C682A1951CF0
Authority key identifier: BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     400674
IP address blocks:        2606:ccc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3f:5a:0e:01:c6:82:a1:95:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929275f0-3197-4a70-8b27-8fff75b6e7b9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=1f688722-a0e1-410b-8b6f-81650f85d541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:94:fb:22:15:14:0f:cc:80:0d:32:51:ee:4a:
                    99:9f:08:51:84:49:06:d9:dd:30:b6:8a:ba:cd:f5:
                    9c:ec:44:f7:1b:1d:29:75:4f:59:e8:e4:30:22:cd:
                    fc:fa:3c:04:91:7d:21:5e:83:d9:14:f6:35:75:60:
                    27:4a:ff:79:26:92:89:e4:5e:61:53:91:55:69:02:
                    ae:0c:a2:04:93:78:16:02:21:1d:20:21:f1:ea:58:
                    9a:d0:98:d1:0a:26:c2:8f:ac:4e:89:08:1a:13:70:
                    85:af:0f:9c:04:77:3a:44:c4:e3:34:77:b8:92:77:
                    52:6c:51:5b:46:20:26:b2:8b:35:43:83:f8:85:c8:
                    e1:56:b1:78:10:96:68:92:4c:eb:ef:a2:cf:41:9e:
                    31:28:87:66:fd:22:6c:46:37:53:cb:50:e8:04:70:
                    6b:f5:a2:e7:44:94:26:a7:32:85:c3:a0:b1:15:69:
                    00:27:97:62:07:83:65:d0:e3:89:7d:f4:2d:52:36:
                    53:a3:fe:14:a3:19:95:2b:d9:0b:cc:1e:7a:1d:5d:
                    63:96:0e:6c:d9:01:f9:85:c0:b2:d9:35:bb:da:05:
                    52:7a:1f:22:57:2e:ed:98:b6:d3:2e:60:cf:64:08:
                    ea:51:d9:a4:39:75:a6:a6:96:20:f4:7d:ce:cc:1e:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:21:F1:34:95:86:A8:C1:69:1D:62:6C:A4:72:5F:FE:6F:1D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl

            X509v3 Authority Key Identifier:
                keyid:BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ccc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:61:79:84:65:ab:6b:82:4c:c7:3b:45:d5:c0:6b:3c:2d:a5:
         69:be:b4:db:a2:7c:31:22:d8:a1:99:01:58:23:38:c4:f6:b4:
         ba:e5:76:96:b5:49:73:06:14:d5:18:17:00:a0:05:f7:0c:a5:
         40:73:38:46:98:c1:00:2c:ff:db:9d:2a:d9:98:3c:d5:85:eb:
         31:c6:53:09:d2:b3:ba:7b:16:e4:09:00:d5:b8:72:8f:fc:6c:
         3f:5d:37:cd:14:2e:b1:56:5b:32:22:17:fe:ed:59:3f:dd:f0:
         1c:e7:fb:57:92:1b:53:69:c2:58:1c:ff:32:cd:3e:fc:85:64:
         b6:97:b0:8a:e4:c2:0c:5f:9f:1d:00:69:5a:13:ee:6b:ab:46:
         e7:eb:ee:4f:27:16:da:09:aa:bd:64:a9:8a:ae:58:bd:02:36:
         79:37:29:3f:a9:07:c8:fc:6e:8e:cd:e4:5f:bb:a2:a0:ef:13:
         71:2a:5e:bf:ac:f4:a3:f1:5e:d5:e2:e1:17:ca:10:e8:82:4d:
         30:99:ca:a6:61:01:35:c2:c5:fc:5d:d5:a6:71:2e:a4:80:3b:
         e5:b8:7b:39:92:53:82:ad:31:69:f6:fb:11:c4:6e:c8:81:4c:
         9f:b8:f2:55:f5:d7:ca:89:85:7b:99:51:61:bb:3e:4e:d0:0b:
         be:66:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:07:49 2025 by rpki-client