Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/00e9319a-5c66-3db1-adec-74a9a8e86a18.roa
File:                     00e9319a-5c66-3db1-adec-74a9a8e86a18.roa (raw, json)
Hash identifier:          2KWdHWvL+jBbYTa5x54vLY3AlfsRmW+avXttD7t5NCA=
Subject key identifier:   B8:0E:E0:FC:78:7C:AE:20:BE:10:8A:B3:11:5E:CF:41:CF:06:0C:F7
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584A4ACBD639BA1E47657A1DB380
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/00e9319a-5c66-3db1-adec-74a9a8e86a18.roa
Signing time:             Tue 24 Jun 2025 00:41:17 +0000
ROA not before:           Tue 24 Jun 2025 00:41:17 +0000
ROA not after:            Mon 22 Sep 2025 00:41:17 +0000
asID:                     396982
IP address blocks:        2607:9f40:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:cb:d6:39:ba:1e:47:65:7a:1d:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jun 24 00:41:17 2025 GMT
            Not After : Sep 22 00:41:17 2025 GMT
        Subject: CN=61b16f0c-1cbf-44c5-9000-0cc39974d9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:17:86:e7:71:3c:8f:19:39:9e:08:fe:34:
                    ad:d9:7b:4f:8d:53:94:4c:34:b1:02:86:08:5e:bb:
                    ab:ee:83:65:3b:c9:3a:61:cc:10:fc:e2:64:61:4c:
                    94:bc:b5:0d:54:87:85:d0:db:48:1a:32:50:99:69:
                    ce:a8:4e:e1:fc:db:6a:be:2b:b8:6a:f4:9d:d8:f7:
                    6f:62:81:f0:eb:89:10:bf:ce:c7:57:a6:12:10:26:
                    58:a7:24:b0:18:3e:eb:61:09:7f:f9:05:39:56:f9:
                    94:ba:e1:19:b8:32:06:20:c1:f1:e2:35:c0:35:da:
                    41:7e:8b:a4:57:0b:fe:53:c6:a4:38:68:e7:00:33:
                    ed:a2:c2:9b:bc:70:ee:71:77:03:eb:66:0a:70:cd:
                    c0:ba:a6:00:df:8f:f3:f9:f9:91:46:a7:4f:29:c5:
                    9f:60:c0:8b:ab:55:e7:64:11:5d:63:b0:e7:9a:0f:
                    d1:d3:b2:1d:d9:d4:2b:b7:2a:17:b5:dd:39:07:88:
                    27:c2:06:c6:97:c2:49:5f:dd:41:36:0a:db:63:1a:
                    76:e6:86:15:7d:49:1f:94:49:4e:f2:2e:ea:17:06:
                    e2:1f:25:c3:f8:80:26:d0:c2:aa:34:60:b9:f6:5f:
                    c5:7b:59:cf:3e:56:47:3f:90:ec:03:62:59:22:1c:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:E0:FC:78:7C:AE:20:BE:10:8A:B3:11:5E:CF:41:CF:06:0C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/00e9319a-5c66-3db1-adec-74a9a8e86a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:7c:15:a0:0d:e9:8d:86:b2:bc:6c:bd:15:a4:3a:3e:2f:
         bb:7a:58:4d:da:ac:21:b5:a1:ba:e6:ea:40:14:4a:a7:97:e8:
         63:73:0c:c5:b6:28:b2:f2:0e:94:04:ff:6d:f2:93:52:93:c8:
         4f:07:da:18:43:14:e2:97:94:6d:8d:5f:1f:8f:fc:99:45:06:
         9e:09:a2:9c:30:f4:e9:49:1a:7e:2e:bf:d6:5e:27:ae:52:fa:
         5b:b9:1a:0a:74:2a:3d:57:80:d3:9f:5f:d2:8d:70:b2:ab:4f:
         92:06:30:b9:9d:04:d6:da:42:2c:51:cc:25:38:0d:74:40:fa:
         49:d2:ed:c6:ba:7d:b4:22:cc:53:b5:33:0a:85:0d:24:43:86:
         7b:8f:ad:91:37:a9:8c:53:08:53:a0:5d:5b:49:cd:fe:a3:f0:
         a6:5b:83:8c:7c:0e:14:27:51:4a:5a:39:ed:c4:c7:c2:5f:c5:
         ee:2e:7e:2d:1f:a9:3c:d6:ab:52:63:0c:40:fe:19:a7:11:8d:
         a7:7a:2d:ba:85:f5:57:1b:40:10:d3:aa:76:6b:ee:65:25:bf:
         c1:cb:fb:dc:4b:76:7e:02:ff:a4:b6:5f:19:e6:0a:ba:10:f4:
         3c:c6:c3:1b:b2:a5:9a:48:6f:07:61:2d:2d:b8:57:71:cc:d7:
         0a:9d:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:40:35 2025 by rpki-client