Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa
File:                     88abbe18-5bbe-3685-9602-70b879733f63.roa (raw, json)
Hash identifier:          KQstF9tyYFCRto1kXxiNfTgq/+zGJD9EPs+C+4oBpS8=
Subject key identifier:   45:67:B7:1B:E2:BF:88:69:2B:61:40:9F:46:F9:EA:B1:A6:A2:AD:9D
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584A549B1943ED603067FB84F960
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     8987
IP address blocks:        2601:9202::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:19:43:ed:60:30:67:fb:84:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=71a5b14f-dc18-44a2-935f-081856ae6316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:35:72:32:eb:70:46:d8:c7:20:1a:f0:58:
                    e2:b0:ac:98:ab:a6:ce:ac:8c:14:6f:01:38:f6:9e:
                    58:95:42:79:f0:c1:cd:6d:ed:71:43:e6:42:50:7e:
                    71:e1:97:59:1d:24:42:96:6d:0d:6a:0c:7c:d3:4d:
                    f6:6f:0b:a1:2b:52:72:8a:ec:29:42:3f:09:7d:41:
                    68:56:95:e8:56:2b:68:18:09:b7:4d:2e:3b:e1:a9:
                    04:65:0d:72:ce:f2:55:b8:8d:05:e0:a7:79:6d:e6:
                    ec:ee:c6:8e:4c:00:ea:03:d6:5f:25:c2:6d:f4:24:
                    75:ac:cc:a2:f4:f8:f0:a9:c5:66:a1:aa:0d:02:6e:
                    85:c3:7b:39:1a:55:67:ba:37:0e:b7:12:e9:03:ee:
                    7f:73:38:75:83:bb:50:cd:79:d0:70:99:a8:cb:a8:
                    d4:ca:e7:3f:ab:fc:54:a1:df:9b:a5:f5:17:58:da:
                    12:b1:2e:73:b0:fd:d8:0b:bf:08:9d:c1:60:3e:e5:
                    62:8b:1a:54:39:8d:93:87:04:cf:d7:b1:53:7d:f5:
                    6f:b1:9c:ab:d9:77:1c:74:a6:bb:a7:3c:89:9f:37:
                    b7:80:84:ce:9a:51:d1:8d:b4:13:c5:25:87:3b:13:
                    9d:5d:d3:c4:97:8c:60:da:ff:b8:19:8f:15:2e:4d:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:67:B7:1B:E2:BF:88:69:2B:61:40:9F:46:F9:EA:B1:A6:A2:AD:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/88abbe18-5bbe-3685-9602-70b879733f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9202::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:12:f1:ac:bc:f8:87:cd:2e:bf:6a:cd:80:90:f6:fa:b1:
         1a:52:7a:aa:f7:68:92:d9:05:ec:58:de:aa:2c:69:81:64:e9:
         05:9d:6d:55:62:e4:85:da:aa:1d:99:67:c0:2d:38:2c:4b:1a:
         31:73:8c:68:54:79:84:65:10:19:bd:5d:cc:17:4f:59:8b:bd:
         16:f3:c6:19:9c:fd:47:76:20:a2:7b:7e:97:1e:9f:79:a9:ae:
         3f:da:c4:bb:b7:de:a9:f3:2c:ba:a5:b2:63:17:3b:2b:90:ed:
         b5:49:a2:8f:4b:3f:12:c8:a1:b5:49:80:87:df:c7:e5:6a:cf:
         b8:9d:de:50:bc:b3:ab:74:35:50:6a:73:b1:9a:ea:c6:70:40:
         e3:d0:0f:d8:8f:90:e3:6c:75:92:ca:ac:84:b2:f0:24:48:a4:
         67:84:07:98:43:5a:1e:1e:d5:7b:19:22:2e:1b:ca:cf:5e:20:
         1a:0b:9b:d7:34:45:19:15:eb:b3:30:7e:a6:9c:31:e7:0f:53:
         4a:b4:de:80:d8:53:81:c1:a0:d4:e9:ec:c6:5b:24:22:67:33:
         fd:dc:04:30:36:3d:ca:c7:aa:d8:26:f3:b7:da:ba:4b:0f:3f:
         94:b2:30:fe:99:3c:a9:ad:15:da:ea:50:a7:47:14:92:d6:ce:
         b8:c2:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:09 2025 by rpki-client