Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa
File:                     a6d1a955-218f-3aa1-9423-9a887606550a.roa (raw, json)
Hash identifier:          p3q914Cr3RlDGliFBwjSzn03+hAjSk2MNZI8s2a5meU=
Subject key identifier:   25:1D:69:18:89:85:DB:5B:9D:E0:31:F0:B2:04:A7:8B:A4:72:69:D4
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584A9BCB68C551F3F575A80D8F80
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     150325
IP address blocks:        2607:eb40:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:68:c5:51:f3:f5:75:a8:0d:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=4f9aadc0-53a9-4fbe-9187-5fb08e208abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:66:9f:c0:d3:72:fa:e7:33:88:e3:6c:ea:
                    33:3c:fa:47:7d:ca:b9:aa:84:88:f7:f2:ac:6c:bf:
                    ef:b8:5b:97:90:c0:0c:99:8e:09:8d:b5:fa:3e:cc:
                    cb:29:5c:40:7d:bb:84:c1:3a:76:e5:70:fc:5f:03:
                    d3:0d:64:71:dc:a6:b4:45:24:5d:88:a6:82:ba:f9:
                    60:c3:23:47:b2:df:38:80:f9:21:2f:e2:5c:c1:99:
                    44:60:60:8d:17:ad:2d:d4:b2:5b:b7:54:25:54:f3:
                    c9:15:f8:97:b0:6c:40:5b:3a:5a:0c:bf:60:ea:ff:
                    6e:7e:44:de:27:16:e7:58:2a:62:8d:3e:32:65:90:
                    85:56:8f:e1:ad:85:86:8c:23:ca:ec:83:ac:a6:90:
                    43:b4:a3:67:fe:bb:16:3c:0d:a8:4d:db:55:1b:a0:
                    4f:f8:dd:74:89:90:f4:d6:da:5c:5a:7e:40:70:6e:
                    df:46:28:61:36:92:d1:0c:eb:96:1d:cf:82:7b:71:
                    cb:fa:f6:d3:2b:21:1c:b9:9a:6e:20:d6:fd:b2:6a:
                    77:0e:2c:a7:98:cc:b9:32:88:c1:a4:68:b8:7a:c9:
                    46:f5:a2:98:b2:1a:bc:bf:3b:f1:b6:c6:65:f1:65:
                    b4:2e:d4:8f:91:70:6f:ba:4f:c3:06:31:ee:2e:70:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:69:18:89:85:DB:5B:9D:E0:31:F0:B2:04:A7:8B:A4:72:69:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:dc:b5:22:dc:c2:99:18:25:f7:1e:bb:89:1b:5d:41:7d:
         9a:33:77:0b:82:1e:5c:3e:4e:2e:db:8f:91:b9:c2:43:6a:ab:
         60:0e:06:c6:e8:2f:c6:b8:72:28:55:8f:51:51:bf:41:40:2a:
         c7:05:ef:df:e9:2d:b2:c4:57:ac:c1:9e:9a:0f:1f:99:f6:04:
         d2:e5:d4:0b:31:5c:b5:cd:db:81:c2:ce:c4:d4:58:69:86:7e:
         58:94:43:58:10:a6:d4:c5:b1:e5:3b:42:7f:88:9f:6d:2b:60:
         46:c2:70:31:30:e5:45:4d:d2:77:8f:98:04:af:4c:b1:df:b5:
         71:74:93:7c:58:bc:ac:f2:17:19:ff:64:2b:ca:d1:e9:a4:2b:
         2e:ae:89:d2:d1:1a:45:c7:06:d9:d7:45:eb:69:df:18:9b:f2:
         72:43:3b:9b:53:35:04:e1:02:33:bb:d8:84:e5:d2:07:4f:a8:
         b4:ed:75:4c:56:00:cf:fb:ac:cc:ce:a6:74:92:e5:93:cb:07:
         3d:8c:40:62:bf:d1:c3:3c:ff:04:e2:8b:e3:f4:16:62:ac:37:
         4a:0a:ea:94:2a:0d:17:e8:d6:2b:6c:a0:d8:32:c1:a4:8b:3c:
         d4:ec:f5:8e:35:e5:a5:43:f5:2b:57:ad:fb:92:4e:de:59:40:
         06:a2:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:42:59 2025 by rpki-client