Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/64904c40-f977-33ad-8635-e47a89d0e1d5.roa
File:                     64904c40-f977-33ad-8635-e47a89d0e1d5.roa (raw, json)
Hash identifier:          01spEAk2OrUueeD3MNeKFX3Wcs6Kot16fkMT/ZHg0Ik=
Subject key identifier:   07:B7:9C:89:24:6C:7F:7C:85:66:DA:71:85:79:F5:C3:3E:EC:DD:A5
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849BDDA3C77A6B96B012D065C00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/64904c40-f977-33ad-8635-e47a89d0e1d5.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     21928
IP address blocks:        2607:7700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3c:77:a6:b9:6b:01:2d:06:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=10155cd0-2add-4a05-87ea-b25ba7ce9f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:a3:2f:e4:8a:b6:7a:75:96:7a:ac:23:58:
                    57:16:80:4a:df:73:d3:7c:4d:cd:a7:69:8e:84:20:
                    52:d1:17:59:1a:d7:b2:d3:19:84:b9:a4:e9:60:09:
                    06:38:74:35:cc:30:3c:86:9d:4a:f4:29:d7:6d:10:
                    2a:b6:6a:02:e0:ac:38:97:48:99:fc:b9:dc:43:99:
                    a3:7c:63:57:9c:84:ff:14:6d:e7:eb:0b:d8:82:0d:
                    b3:e1:45:a2:01:94:e6:c8:a0:3b:0e:4f:63:af:bd:
                    55:ee:89:4b:c3:7a:91:0b:ee:c3:fb:19:39:2a:4d:
                    3a:77:46:f0:41:29:1e:a1:4a:91:46:4f:ce:6a:88:
                    5a:c2:40:95:2f:1a:9f:f9:04:15:9b:ba:4f:61:0f:
                    ab:6e:62:6f:c0:19:18:c3:2f:b0:7f:26:71:24:0f:
                    42:07:65:88:f7:a0:bd:c3:b5:22:da:8d:49:b5:6e:
                    9c:50:0b:9b:00:ac:10:7f:7b:24:79:93:60:0b:db:
                    74:bc:d7:64:ae:bc:e0:e0:cf:39:7a:2d:3d:66:30:
                    a9:da:f6:75:8f:41:59:ec:17:07:c5:34:26:86:16:
                    b8:85:49:50:f9:4b:e0:66:05:e8:df:f1:0d:f7:39:
                    fa:44:19:00:87:09:a8:f9:55:33:0a:14:a4:a9:4c:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:9C:89:24:6C:7F:7C:85:66:DA:71:85:79:F5:C3:3E:EC:DD:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/64904c40-f977-33ad-8635-e47a89d0e1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:41:b8:bc:b9:80:b3:11:a7:c3:4f:97:4a:96:cc:52:65:
         d6:bd:aa:1e:08:c6:e6:b6:8c:22:ee:8d:61:c5:b1:de:89:69:
         af:23:5c:72:62:d0:c6:c3:d1:44:9f:de:76:4b:43:fb:e3:2f:
         d3:bf:f0:f7:ea:8e:90:9e:bf:1d:36:35:92:98:ea:d0:92:3b:
         7a:eb:34:ca:34:cb:92:64:e5:7b:0b:5e:eb:a1:b2:29:80:88:
         74:ac:6b:ca:da:a5:5f:62:4a:2a:68:52:67:50:22:25:66:fb:
         78:2b:c7:76:b8:c8:f0:04:33:15:5d:f2:1a:21:42:af:88:25:
         b5:da:bf:42:30:a6:f1:fa:22:16:ab:ee:57:52:b6:97:79:20:
         9e:2b:68:ff:49:a1:98:de:00:fc:da:29:40:70:07:b9:78:2f:
         50:ef:64:97:03:0c:61:e5:ae:c2:c8:32:de:72:2f:41:d8:f4:
         b9:aa:48:3d:7d:81:2b:ba:a8:0f:bb:67:52:fb:af:3b:a5:c0:
         b2:a4:ca:bd:3d:3e:44:07:3d:a1:16:08:26:68:d1:fe:29:2b:
         24:c3:7b:0a:ed:fd:f8:7f:46:d0:b0:1b:13:4c:96:c4:e8:66:
         23:c1:6f:ba:28:31:3d:05:b7:22:9d:05:55:57:cb:d5:31:3c:
         ac:74:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:13:23 2025 by rpki-client