Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa
File:                     ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa (raw, json)
Hash identifier:          h9zrwlR/RkwAeRj4PFf2WuX2QnZH0CcEGzJSeNdD0rM=
Subject key identifier:   30:68:7E:3A:8D:48:64:E3:DA:CF:D3:04:CC:71:B8:4B:88:87:2F:AF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584A4C3B1237A94C22E16DFB38E0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     62775
IP address blocks:        2001:468:1f21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:12:37:a9:4c:22:e1:6d:fb:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=2c98262a-dbfe-44e9-82ac-43d03114ac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:38:ca:e6:39:41:22:d4:06:89:07:ee:5b:
                    51:db:59:6b:96:26:44:c0:46:f3:5f:ed:b0:0b:00:
                    50:e8:50:e3:77:1e:58:54:a9:49:fa:19:a8:cb:c5:
                    73:fb:8d:c0:8b:47:b0:5c:c5:9c:a5:ad:7a:d3:c5:
                    ea:85:b3:1e:a9:fd:3b:d7:62:2e:d9:3b:3c:4d:f7:
                    af:41:f8:f8:97:ea:36:e7:ec:28:63:8b:38:36:1a:
                    5a:03:09:5c:91:ac:2e:5d:ac:34:92:c1:c4:3d:76:
                    f3:15:9c:8e:d0:2d:0b:f9:b9:67:62:cd:fa:0d:5c:
                    19:83:4e:b7:cf:51:9d:fb:56:2d:c8:f4:98:07:2e:
                    33:1c:54:e8:df:c5:68:b8:01:5a:eb:3f:e5:21:94:
                    b3:6b:a3:a4:a5:93:75:b1:9f:08:8f:40:3c:73:ad:
                    9a:bb:28:01:38:fe:8f:c7:11:ec:53:6c:ef:6e:5e:
                    e9:f2:fb:46:8d:ad:f6:fe:f5:62:85:73:7d:ce:fb:
                    16:5f:ae:00:8b:e4:79:6d:bc:17:24:9e:ab:3e:4d:
                    c6:5b:e0:dd:21:91:a9:84:8b:66:3a:6f:82:99:b0:
                    0b:28:ce:5d:83:ac:73:e8:58:74:a5:96:d3:2b:57:
                    96:40:79:31:7c:08:ba:fc:02:82:8d:94:58:73:9f:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:7E:3A:8D:48:64:E3:DA:CF:D3:04:CC:71:B8:4B:88:87:2F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:27:44:06:b2:4b:d1:cd:59:87:4e:10:14:8b:3c:e7:f2:
         76:8d:5d:ce:44:e4:83:06:5a:b6:4e:ff:11:52:4c:3a:4e:c2:
         37:9a:6b:e3:ec:c4:d2:0d:8c:9d:a9:8b:8d:91:c9:50:11:ab:
         f0:dc:ba:69:9a:c8:b4:57:0c:85:98:32:25:28:23:39:02:cf:
         b2:44:36:06:1c:be:83:ed:ec:51:36:cd:19:77:18:1f:a2:66:
         91:09:61:45:d2:a2:cd:9b:6e:62:93:a5:7b:d6:33:47:f0:c7:
         aa:6c:17:d2:c2:c8:51:7b:2e:39:91:73:d2:a4:4b:ba:b9:a4:
         c1:c6:c6:7d:19:c6:42:55:11:be:a5:fd:f8:70:f2:6f:f4:c9:
         31:84:c3:58:cc:bd:5c:01:f6:ef:d0:81:c2:cb:e0:c7:fd:a0:
         a4:0d:c8:a7:d7:83:d1:91:fd:50:12:08:12:1d:ff:95:2f:53:
         72:8f:49:fe:ec:6d:ad:71:68:94:cf:29:3f:ef:55:64:d9:e7:
         dd:47:89:af:9d:32:d2:a1:4c:62:3b:45:4c:f8:81:cf:ea:58:
         23:12:eb:1e:d4:cb:83:23:bd:0a:0b:e2:ce:d2:26:a6:87:60:
         f8:bf:e2:88:4a:3f:35:aa:77:72:97:0e:6a:0d:20:ec:16:06:
         1b:57:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:40:12 2025 by rpki-client