Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eadf322c-9203-37b9-b870-e37ea7ed108a.roa
File:                     eadf322c-9203-37b9-b870-e37ea7ed108a.roa (raw, json)
Hash identifier:          MM54x2FcDfQ94aUQQ0uAXzLeHWBaoEQNhb/9hLTyjCI=
Subject key identifier:   7A:99:04:D4:76:1A:48:B3:7C:79:86:67:B9:91:EE:2F:BA:6C:79:4F
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A5E6063DD621DEE75ABF08480
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eadf322c-9203-37b9-b870-e37ea7ed108a.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     28110
IP address blocks:        2606:f180:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:63:dd:62:1d:ee:75:ab:f0:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=a220683b-2cd4-401f-bee7-85db671f70c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:25:ce:c0:e9:a1:0c:7c:06:db:90:e0:35:
                    5e:f0:e6:b6:d4:57:d0:49:0a:7c:69:e2:a8:61:eb:
                    30:45:79:a0:0c:bd:62:d1:cb:78:c2:68:07:f9:0e:
                    18:6e:4e:51:00:62:e9:4f:cf:d5:06:6c:48:80:de:
                    b8:b3:44:8b:3b:7a:ef:8e:30:6d:6e:01:cb:71:76:
                    eb:e0:89:af:b5:94:c0:9f:47:62:65:35:64:20:aa:
                    89:f6:ae:c1:77:20:12:08:1e:13:89:a1:64:70:72:
                    38:f1:b5:d5:52:7c:09:29:9a:68:0b:b8:c7:99:19:
                    dc:b0:3f:51:93:e6:85:33:fc:eb:2c:33:93:59:da:
                    6e:97:59:09:c6:39:2e:eb:2b:cb:03:31:ca:1f:8d:
                    07:51:d7:62:51:d7:5f:e6:ef:5f:7b:15:9a:04:b5:
                    13:3f:83:5e:55:29:a6:7c:8f:97:bc:91:57:4a:65:
                    1e:40:62:04:06:9b:12:10:ca:08:16:1e:d3:bf:dd:
                    2e:78:e2:98:11:1f:b8:46:69:48:cb:44:9f:ca:0c:
                    85:1c:ed:21:21:e1:fe:12:f7:71:ff:4a:35:4c:c6:
                    c1:b2:e6:0d:0c:8b:80:40:b2:4c:43:60:c3:d0:07:
                    00:1e:fa:79:79:74:a3:49:e1:5f:db:1d:a8:ac:50:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:99:04:D4:76:1A:48:B3:7C:79:86:67:B9:91:EE:2F:BA:6C:79:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/eadf322c-9203-37b9-b870-e37ea7ed108a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:eb:7a:a8:f2:7f:0a:20:62:44:ea:a7:ed:d0:a6:3c:8b:
         58:fa:d4:08:ca:6a:ac:13:31:ae:af:db:4e:4e:17:d3:8e:c6:
         a0:04:3c:94:cf:bb:fd:6d:c9:da:16:8e:2f:e5:7f:cd:01:a8:
         34:ad:09:7c:4d:6b:29:62:96:76:0a:35:e6:37:24:fb:b8:48:
         6e:15:da:9e:1c:ad:61:3f:51:72:25:62:f4:c2:28:1b:ee:0c:
         8e:77:42:4a:52:81:62:50:ea:ba:13:34:ae:e1:d8:6f:db:df:
         54:ce:97:09:ad:42:dc:7f:69:23:34:2c:46:05:5b:c6:48:c1:
         10:f4:d0:9d:6a:5f:2b:17:0d:e2:39:a4:81:e7:ee:24:29:fb:
         7c:00:74:9a:8e:ed:3a:a7:e3:c6:5c:ba:ec:34:eb:2a:96:01:
         3e:23:89:4f:a7:19:cb:58:95:18:1a:1a:6e:82:ae:c4:fc:ed:
         79:a4:43:61:74:27:2b:3c:40:5f:8b:c2:e1:2b:06:90:25:9b:
         38:1b:79:b1:5b:f4:13:52:3e:99:6c:41:23:47:60:86:78:c5:
         42:ab:5e:a9:e1:50:87:01:ce:19:b2:58:d2:c0:66:63:e5:d2:
         96:7e:ea:d1:f2:ca:e9:16:49:bb:cc:a1:46:7c:f7:e1:7e:43:
         c3:b7:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:28:51 2025 by rpki-client