Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
File:                     06fbf2c0-813d-3842-8c17-978a309b106c.roa (raw, json)
Hash identifier:          6/LvIXZkPBv1C9hzdw/nbAeI8jpSLARgc3ZpflD/uxY=
Subject key identifier:   94:FD:07:C2:EB:6D:98:98:E2:8F:0B:0A:0E:2B:D5:56:B6:4D:2F:8B
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F43285849D1650623C0908CD458155800
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     395363
IP address blocks:        2620:129:6010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:06:23:c0:90:8c:d4:58:15:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=bfed830f-f154-4c56-8b46-144cb1210d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:b8:92:0e:55:2a:08:83:ee:a3:e0:1a:4c:
                    bb:e7:e0:66:bb:de:56:b3:f9:73:e0:7b:a3:0c:16:
                    4e:fb:10:2c:73:af:bc:1d:9e:c1:a8:71:f4:63:dd:
                    9b:d2:e0:6c:43:32:04:ce:27:f3:32:5d:90:69:20:
                    65:3d:88:85:9e:5f:21:9d:d2:52:66:0a:ae:da:15:
                    f1:ff:99:5a:de:94:e5:1a:be:bd:2a:9f:66:da:56:
                    a5:fd:17:2d:3d:2c:f7:98:9e:66:0f:4d:a2:22:70:
                    5f:92:1d:52:de:6b:0a:f5:3c:48:da:3d:79:01:45:
                    e2:80:df:b5:85:bb:6e:25:1a:57:7a:a7:a3:59:fd:
                    64:0f:5f:a1:2e:53:03:d9:78:59:31:2f:07:4f:41:
                    89:32:52:4e:e6:b3:b7:50:e3:14:fa:b8:9b:19:cc:
                    11:3c:e3:57:32:33:77:12:0d:6a:eb:2b:5b:11:0d:
                    52:56:de:b0:a8:2d:9b:80:af:f6:09:56:ac:2c:07:
                    a9:fc:bd:94:7a:48:74:66:31:45:36:44:7a:63:d0:
                    03:24:c2:47:36:19:ec:0d:d0:b1:ec:da:c8:4c:a8:
                    65:66:6e:a8:b3:00:29:ec:6b:1c:28:6e:00:00:f9:
                    5c:ff:2c:0d:c1:d2:4a:96:7e:a9:0f:b5:38:d5:25:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:07:C2:EB:6D:98:98:E2:8F:0B:0A:0E:2B:D5:56:B6:4D:2F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:27:f1:51:c2:d5:e6:cc:ba:53:e5:6f:6b:9d:a5:c8:5c:
         5a:79:4a:1c:93:76:80:de:92:8d:62:6e:42:1b:12:fd:f3:4d:
         83:fb:24:53:7c:df:47:e2:b0:a2:62:06:0d:d1:36:3b:39:3d:
         76:a0:e8:0c:1a:7e:f6:3b:0f:94:7b:b0:5c:f8:71:28:58:c5:
         62:8a:6e:14:ec:95:05:24:56:75:0b:15:26:55:76:9f:3a:8d:
         3f:4b:a3:ce:74:03:2a:21:d0:e1:e0:05:8d:f4:88:a4:a8:c9:
         98:46:f0:f3:0a:b5:68:03:74:e0:a8:7e:0c:56:82:50:fd:94:
         1d:a5:63:2e:98:b9:ef:b0:dc:86:63:d0:08:b3:1c:a9:f0:3e:
         16:5e:13:60:96:7c:f6:e3:6b:7d:e6:56:e0:5a:7e:3e:83:5e:
         64:f6:a3:1d:a0:6c:59:5a:d7:1d:46:04:96:1d:48:3a:54:81:
         e5:56:e4:74:83:b8:48:d4:51:fb:9c:c2:35:f8:90:3f:fb:23:
         10:7f:06:7e:87:40:9f:68:70:5d:2b:0b:59:cb:5c:49:29:eb:
         75:2c:58:55:67:99:fc:fe:f0:2e:7b:6d:a0:57:1a:a6:af:ea:
         2a:e0:55:6d:04:78:f9:b3:1d:4a:9b:a3:cd:a9:ce:a8:b5:6a:
         87:86:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:16 2025 by rpki-client