Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
File:                     82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json)
Hash identifier:          4kiQp03gkcg1Kon05abMJxsFN598Iib4HUx15VL8xhU=
Subject key identifier:   1F:A1:D9:3A:D5:0C:3A:AA:9A:A4:2C:04:17:7C:A9:58:AF:6B:2B:8B
Certificate issuer:       /CN=b824dfb2-be33-4946-af95-2296acd823af
Certificate serial:       010D0C9F43285849E7BA8747C009C8DD68668B80
Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     10737
IP address blocks:        2607:4940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:87:47:c0:09:c8:dd:68:66:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5969409d-433d-4ecb-8a81-a7d886fcddce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:d1:78:88:b5:d8:d7:59:03:be:06:0d:d1:
                    00:07:dc:da:e1:ea:6d:a9:12:5f:07:ca:2a:c8:80:
                    89:22:1d:22:2e:32:b7:5b:d9:74:f0:aa:c7:74:ec:
                    24:38:73:91:bc:11:22:ef:54:6e:62:75:21:e6:cb:
                    71:42:af:14:21:d4:15:d4:d8:13:10:14:4c:61:46:
                    e6:e1:e1:cc:76:43:dc:1f:c5:fb:25:3d:d1:b6:f7:
                    ce:cf:ee:4c:61:5b:29:b9:8d:62:51:a9:ee:03:39:
                    75:3b:94:33:3b:f4:07:38:b0:c4:f6:a7:55:b9:79:
                    0a:d3:a1:32:4c:0b:52:28:a1:f3:54:19:8e:c9:fb:
                    4a:ed:c7:65:09:ac:bf:ab:58:aa:cc:b5:c6:bc:65:
                    2c:ae:32:06:b5:3d:84:c1:9c:2c:98:39:f4:e1:13:
                    c8:7f:d5:37:46:a9:9e:2f:9e:73:63:a5:dc:1a:45:
                    31:b2:d2:2a:6f:20:a9:cf:a5:de:17:bd:3d:1f:ed:
                    c3:2e:a5:09:be:99:bb:24:4d:c4:e6:90:3b:74:a1:
                    63:7e:96:00:d0:c5:5f:68:09:03:71:00:21:c6:d0:
                    09:9a:64:78:1d:ed:c4:3f:d4:f4:55:23:a8:ca:64:
                    c9:fb:41:b0:41:0c:c6:f1:7b:c8:1f:a0:8b:cf:32:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:D9:3A:D5:0C:3A:AA:9A:A4:2C:04:17:7C:A9:58:AF:6B:2B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl

            X509v3 Authority Key Identifier:
                keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:78:e1:41:65:01:07:01:3f:75:e4:22:23:49:3d:e6:6c:
         79:61:e4:34:fa:0e:9c:5e:68:3d:4f:d8:17:29:3b:95:f5:81:
         a3:24:9a:61:e1:a5:e4:d5:f4:ad:13:6d:e7:b1:f1:a1:54:f4:
         e4:37:58:ae:31:33:db:bb:d9:d1:96:f3:20:03:37:91:71:3d:
         af:12:75:5f:d9:da:0d:5e:e8:a1:34:ee:f6:ae:69:02:7e:9e:
         04:7f:6b:25:5e:1d:49:29:54:7e:f9:00:82:23:81:4f:cc:54:
         22:9b:43:d0:1d:5a:be:36:45:30:16:32:ce:89:0c:8d:3b:ab:
         cb:1d:05:b0:5e:91:f1:fa:ef:8f:8a:47:e1:c4:e4:04:5b:40:
         a0:a6:ba:46:bb:37:2e:50:69:31:b0:7c:2e:6e:86:b9:c1:cf:
         70:33:fb:79:fc:f2:26:43:a8:7b:51:bf:23:d1:a0:f7:0e:f7:
         18:7e:78:ba:07:a5:c8:41:59:90:4b:e5:e2:f8:f9:ff:1c:13:
         45:35:c9:3c:23:c0:00:f4:d2:1a:b4:c0:80:1f:bc:e4:9a:58:
         f8:5d:e8:f7:f7:fa:52:e6:3e:12:0c:38:f6:9b:af:19:05:03:
         29:8a:c5:44:c4:20:40:f3:3d:80:0a:5a:7b:89:06:a6:77:bb:
         03:01:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:13:28 2025 by rpki-client