Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
File:                     df287de6-1914-3cd7-888e-504ff51dd500.roa (raw, json)
Hash identifier:          YJAuc++G9puwN187QHouaJ4JDEuobmrf3sfehQNF030=
Subject key identifier:   AE:19:9E:2D:53:3B:9D:C9:4E:85:4D:2B:A1:24:2E:43:89:11:B2:23
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A4F05C633DA11DE8B89BE9680
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     23470
IP address blocks:        2602:fb54:149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:33:da:11:de:8b:89:be:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=18525d47-e7d4-4e90-8cc3-9ae2c46824a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:a6:c1:02:23:96:bf:bd:73:16:57:9a:7a:
                    74:6e:07:70:3d:91:b9:90:f3:30:0c:e8:ab:22:8e:
                    d4:b3:84:d9:54:b6:68:37:fd:c3:9e:bf:58:60:b2:
                    c4:48:79:31:6b:8b:c4:40:fb:3b:58:cf:96:40:53:
                    ee:f7:44:78:4d:59:ba:8a:7f:ca:19:22:a0:f9:99:
                    eb:0f:22:22:fe:81:45:46:51:37:ba:04:91:a8:c8:
                    d4:4b:a8:42:08:8e:ce:76:0d:72:26:32:97:05:6f:
                    ac:b1:e1:2d:97:82:33:6f:1c:aa:af:5c:67:8e:76:
                    f5:cf:f8:a8:bd:7c:9c:64:7f:fe:ff:78:9d:57:45:
                    07:14:72:79:cb:e3:20:95:73:09:b0:96:6a:49:c4:
                    6d:25:cb:ec:17:34:bc:49:6a:2c:11:e8:82:63:6d:
                    cc:c6:2f:98:a5:f6:8c:b4:b2:86:3f:33:38:96:9c:
                    0b:5e:3d:c3:a5:99:52:7a:48:ad:c4:b2:a9:f0:b6:
                    5d:34:c4:32:fd:c5:21:d0:11:18:ba:1b:9b:63:37:
                    9b:77:b0:28:d4:8e:cf:d4:37:a9:93:97:33:70:e5:
                    14:e7:f9:7e:39:4c:7a:7e:e3:46:f4:ca:a4:43:66:
                    7a:d9:69:4b:91:85:52:02:4a:3e:e0:ce:40:1a:94:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:9E:2D:53:3B:9D:C9:4E:85:4D:2B:A1:24:2E:43:89:11:B2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/df287de6-1914-3cd7-888e-504ff51dd500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:ed:2e:5c:55:c0:1a:72:b9:a5:7e:57:e8:89:ed:1c:a9:
         49:12:8e:e7:ea:bf:69:83:05:78:76:17:d8:c9:f6:76:64:d7:
         da:0f:af:08:29:e9:1a:b6:5d:52:bf:4c:5b:cf:2c:15:43:0d:
         68:44:b7:23:4e:45:57:61:62:36:3b:0a:dd:7b:ad:89:d9:26:
         29:af:ab:4b:eb:cb:75:87:ed:a1:da:05:0a:b5:75:17:6e:eb:
         4f:00:8d:c5:9a:9b:96:9e:30:d5:99:1d:c7:a1:a5:84:f3:04:
         3d:47:a8:53:51:1e:5f:ed:a5:ea:c2:ab:e3:0d:5d:f1:61:c1:
         c9:cb:90:64:4d:9f:6b:a9:a0:e2:2b:00:63:6a:65:7f:e1:bb:
         bf:b5:22:40:79:f1:35:37:0e:55:6a:a2:a0:12:d2:ab:56:80:
         26:6f:ee:8b:80:c1:d3:aa:41:56:32:d3:7d:9b:8f:53:27:1b:
         71:6d:58:4b:52:f0:1d:73:37:16:9f:b8:ff:72:b7:0b:bf:6e:
         27:b3:4f:ba:5d:95:3c:af:b4:cc:b0:03:f7:67:cd:f7:8b:fa:
         fb:80:cb:5e:3e:64:93:6d:c1:32:43:4d:bb:0c:98:7f:c3:22:
         2c:ab:32:e1:6a:9f:66:b8:c8:a6:df:fb:cb:8b:37:1c:09:b0:
         0e:77:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:57:20 2025 by rpki-client