Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa
File:                     3769f206-20bf-3a22-abf2-d969401175d2.roa (raw, json)
Hash identifier:          oukCmoxH8NWb7pGlDAZmugrthZd7nRhn0lLxBkUguPw=
Subject key identifier:   A3:40:67:73:F4:FF:8D:04:88:54:D9:41:C2:D6:6F:7A:FE:3E:AF:80
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A03A5424F51F9D4206C66AE30
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     3491
IP address blocks:        2606:9dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:42:4f:51:f9:d4:20:6c:66:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=d2e12500-978c-46ff-bf75-c04fc574524a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:5a:2e:5b:74:43:39:a4:8d:aa:ed:64:55:
                    c6:db:cd:62:65:09:71:02:d4:e4:c1:f4:42:22:ee:
                    4c:82:b0:d2:6a:0c:2e:89:1a:ed:4f:f0:d5:69:f4:
                    34:c7:4d:da:16:89:dd:e8:c2:09:eb:a6:6b:18:2d:
                    17:94:3d:f0:10:d9:7d:f4:c3:54:36:fd:64:f9:f5:
                    ab:31:49:a8:2a:6b:ca:68:d0:58:6b:48:82:71:25:
                    18:f5:c4:34:fd:34:8b:5b:1b:c4:39:08:4a:f3:43:
                    8f:4c:45:fa:a6:95:3a:f9:94:46:fc:41:cb:34:db:
                    55:8e:35:c6:13:77:2b:7d:08:c6:4a:83:af:df:2d:
                    bc:1e:10:b3:62:12:0e:f5:e6:6c:e4:26:72:96:63:
                    49:10:8c:ed:49:c0:60:ff:8c:90:b4:07:cf:ec:93:
                    40:98:fa:b6:ad:b1:e6:58:31:19:c3:8e:a2:b9:83:
                    b5:4b:ad:53:06:77:3d:dd:b7:2b:85:22:cb:99:d7:
                    c2:e4:49:a0:7d:8c:99:40:a2:10:f3:21:b8:7a:f9:
                    bd:e8:d9:75:af:85:87:8d:79:6e:98:13:ac:7c:97:
                    1e:93:69:a5:34:e4:37:2b:59:71:4e:00:37:20:19:
                    90:32:97:24:21:86:50:67:6d:ac:88:dc:a3:d3:59:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:67:73:F4:FF:8D:04:88:54:D9:41:C2:D6:6F:7A:FE:3E:AF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:86:bf:65:65:7d:f0:09:4e:46:e8:aa:c1:76:01:53:22:
         08:a6:fb:bd:a1:a3:db:b3:29:15:36:d6:99:c1:e4:47:09:68:
         18:b9:7b:92:97:1c:72:b2:7a:99:0b:1f:f0:89:c1:f8:b6:af:
         2b:ad:bd:35:d6:f5:6c:d7:79:de:37:ac:2c:5c:fd:88:e7:df:
         43:fb:f7:2e:2d:68:2a:a0:56:95:2e:77:dc:67:fc:4b:ad:98:
         8e:0b:5c:66:51:09:15:a0:e7:5d:4c:e9:0b:61:1d:4d:8c:8b:
         01:1b:d8:47:a0:74:bf:db:9a:32:3a:0b:c2:6d:d0:76:43:f6:
         80:25:63:fa:ec:c5:d6:67:24:77:4f:93:37:fa:5b:d4:f8:35:
         b4:d0:f2:e6:51:c3:20:e1:ac:56:8a:b0:ee:54:03:0b:3d:24:
         56:f0:51:a2:bd:0b:7d:67:10:9b:87:de:77:6b:cb:17:2a:16:
         14:c2:51:7a:b0:07:c5:56:b5:2c:f6:ff:5d:d0:91:a3:b4:e7:
         a0:3b:e5:ac:01:8c:8d:0c:2e:2d:db:5e:93:63:c8:7e:a4:e4:
         2f:a0:00:f0:8e:64:fc:83:98:f3:0f:2e:09:f1:c1:fb:a4:f3:
         9a:0a:28:bb:20:cc:7d:1c:f9:d7:5c:a7:bb:a4:c0:95:0f:51:
         3f:9a:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:43 2025 by rpki-client