Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
File:                     307298f7-d8c6-36b2-a709-98bfd0d6750b.roa (raw, json)
Hash identifier:          BmKTUHtZjZYtx//Dv598rM1akAb6dFImj2KDr+MwzbU=
Subject key identifier:   FB:9E:A8:D5:E8:A6:53:F5:13:9F:85:82:00:5D:A6:77:34:41:18:25
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F4328584A53359EA712E9558C4F0EBD80
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     18519
IP address blocks:        2605:fac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:9e:a7:12:e9:55:8c:4f:0e:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=83f4fbee-c708-487c-b974-5af5c7cb880c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:20:c7:e5:d5:dd:b9:fb:74:e8:a7:0e:cd:
                    cb:e2:a4:62:35:08:b1:24:d8:d9:ea:08:7f:ce:91:
                    f8:5c:ae:27:89:3e:49:bb:96:ee:89:30:7b:9b:dc:
                    44:f5:38:1f:3c:d9:fc:83:4b:93:39:48:fb:6d:ed:
                    f0:4a:fa:66:50:27:25:6c:79:96:1e:74:67:f8:f3:
                    7c:6b:69:51:16:b9:4e:6d:b4:2d:b2:10:c2:42:a2:
                    33:18:65:85:9e:59:ad:90:f2:76:2a:16:8f:99:f0:
                    b7:fb:66:fa:13:17:78:67:e1:80:c2:7d:28:2f:0d:
                    75:f0:46:b3:73:a5:0e:dc:63:82:98:1b:24:d8:ad:
                    d4:c9:f1:d4:49:82:aa:ce:56:63:2d:7b:34:51:01:
                    c2:10:da:88:28:09:d5:6b:6c:fc:51:20:82:3b:1f:
                    9d:af:22:f9:bc:c1:b9:58:a0:75:6a:25:b6:27:27:
                    93:ba:fb:5d:97:d4:3f:0e:fe:29:5f:85:70:c9:18:
                    fd:48:65:07:1e:de:33:fd:ac:3d:5c:de:bd:a7:3a:
                    3f:18:6b:98:9f:c2:8c:83:a3:56:43:68:80:97:85:
                    2b:83:bf:c6:1a:36:a4:40:c4:f0:1a:0a:c5:44:75:
                    c1:d9:6e:02:ac:eb:c2:bb:fe:4f:f4:d2:e5:e3:8a:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:A8:D5:E8:A6:53:F5:13:9F:85:82:00:5D:A6:77:34:41:18:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:10:5b:67:36:6f:83:ab:80:1a:1d:f1:e2:c4:6a:ff:37:a9:
         0d:ff:8f:7e:30:04:df:df:18:77:7d:c9:fb:4f:70:7b:65:1b:
         78:67:45:d6:65:69:3e:1f:ed:03:a5:82:5b:bd:57:1c:56:79:
         1d:fe:3d:bf:93:47:b3:7b:b8:40:e2:ff:b8:bc:53:f0:f9:ba:
         35:1c:80:f8:e7:fa:3c:74:3f:5e:a3:90:f9:b5:74:2c:fa:ca:
         18:ff:5c:ec:80:94:54:66:af:f9:b1:7f:9f:12:ec:7b:c6:db:
         d8:ee:37:37:23:00:79:56:22:b2:bc:63:7b:27:2a:7d:82:e9:
         3a:79:ea:7e:63:64:2d:9b:fd:c8:38:27:d5:ca:69:c1:27:bf:
         5a:e0:9e:36:c5:4d:af:81:4b:07:6b:49:27:cf:0e:fc:67:98:
         a9:fe:4c:6e:48:41:a9:20:fe:d0:4d:34:03:f8:ed:51:77:60:
         91:bf:97:ad:d1:8e:fa:97:10:88:70:be:fb:ba:6f:6e:c5:ac:
         ea:59:e3:78:98:77:84:a6:9a:6f:b3:ef:78:68:3a:d4:11:94:
         18:34:6c:69:f5:4e:8e:5b:b9:dc:5e:3e:f5:4b:cf:a2:83:24:
         fc:f9:10:3e:af:42:d4:92:23:0d:39:1f:1f:16:52:a3:cb:31:
         bc:54:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:34:17 2025 by rpki-client