Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e1ebbf1f-e902-33b2-b38f-1961fb848057.roa
File:                     e1ebbf1f-e902-33b2-b38f-1961fb848057.roa (raw, json)
Hash identifier:          Khrxg+BEde8UuVgCzPCzJJx0m2SH1EsadRcakhIRVNY=
Subject key identifier:   39:25:AF:87:82:D6:EE:CA:08:2D:1B:34:94:F9:8B:49:C3:7C:9B:E2
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584AB91BA8C65027E408DC41DF80
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e1ebbf1f-e902-33b2-b38f-1961fb848057.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a8:c6:50:27:e4:08:dc:41:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=6128136e-0547-46a8-ab90-eae00bfb3838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:3e:06:dd:58:77:0e:cb:f0:7f:54:d2:a2:
                    89:8d:2e:26:a4:9d:7a:2d:9f:c3:a8:43:3a:64:5e:
                    71:1a:c7:25:cb:d6:52:79:1f:88:e2:fd:96:de:23:
                    c7:f5:0d:25:a7:1e:1c:e2:74:65:6c:ae:e1:be:f7:
                    e7:71:63:4e:98:f3:08:cc:dc:aa:f9:6d:2a:6b:f7:
                    aa:35:e4:96:78:e7:31:a2:2c:b6:7b:a9:3c:9f:76:
                    b4:ca:e9:18:c5:01:b1:78:9c:b6:4a:78:77:6d:a8:
                    d4:ef:4e:11:c5:d8:9e:15:ee:62:5c:0c:9a:77:d0:
                    a7:2f:09:6e:37:61:e2:55:ef:bb:1d:09:d5:3d:f8:
                    1b:9f:53:a5:bb:1c:31:df:33:77:4a:e2:99:ea:92:
                    ff:0d:44:60:00:e4:5b:94:c6:b5:ed:e4:b6:e6:cd:
                    ff:fb:06:3c:21:32:d2:cd:60:33:55:57:84:31:12:
                    25:79:28:19:07:8b:92:74:6a:02:3e:e1:73:4f:4a:
                    e9:e6:02:21:fc:93:14:59:ca:2f:fe:dc:78:ad:0a:
                    e0:9e:df:00:0b:20:ae:78:37:17:3f:d1:9c:61:97:
                    bf:ff:38:f4:ea:c1:03:86:92:26:63:2f:a2:8f:3c:
                    9a:a5:f2:4a:d4:03:96:8e:12:59:cc:25:81:dc:49:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:AF:87:82:D6:EE:CA:08:2D:1B:34:94:F9:8B:49:C3:7C:9B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e1ebbf1f-e902-33b2-b38f-1961fb848057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bf:d2:19:8a:07:30:dd:0b:e7:28:43:24:36:6e:2c:2c:48:
         82:5f:55:7a:ca:63:73:47:6a:ce:53:f8:2c:44:2b:9f:36:02:
         ff:f0:4a:3b:c0:84:18:b3:46:b0:4d:c2:51:bd:77:c9:44:ed:
         45:de:bf:f0:83:93:e0:3e:11:64:9c:27:6f:62:0b:df:15:78:
         10:24:ad:7d:cd:2f:ff:8b:1b:8d:94:e1:95:e6:0d:04:fe:ae:
         ae:a9:19:79:0e:e3:9c:2b:b9:4e:9f:15:85:d0:09:81:1a:46:
         4c:5a:1e:06:58:ad:bc:f8:f5:36:81:68:e2:21:a9:83:6f:a9:
         e5:d0:f0:7e:a4:a2:bd:f6:41:66:46:92:9d:65:e2:07:ba:73:
         5b:1a:06:f4:0c:b4:e2:ee:2b:56:38:3a:24:71:b7:a6:44:20:
         33:df:85:6e:3e:6e:c6:aa:b6:f7:4a:28:29:90:0e:87:15:8e:
         25:23:de:15:c7:59:a5:09:b9:4f:c2:7f:10:b2:64:43:c9:e6:
         c5:39:bb:4b:fe:39:67:04:a8:42:3d:3c:97:38:ff:d5:17:14:
         7d:cc:26:1c:f2:4e:58:f2:7f:e1:e2:d4:d1:a3:12:0f:42:ac:
         74:25:b4:c8:06:e0:fa:57:9d:c6:2f:12:81:a9:db:7e:ef:e2:
         fc:96:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:38:23 2025 by rpki-client