Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/f813b92d-1049-3324-97d6-cf95a944b3ad.roa
File:                     f813b92d-1049-3324-97d6-cf95a944b3ad.roa (raw, json)
Hash identifier:          WvxGlcRxbpRNdj55I50AbJqagbekGfmtQw191TFVQTI=
Subject key identifier:   52:61:25:3E:61:EE:D0:32:77:93:45:1E:E4:0C:9F:73:0A:B0:F7:AC
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584A2955608031AFA9A155FB0FE0
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/f813b92d-1049-3324-97d6-cf95a944b3ad.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     22851
IP address blocks:        2607:f558:c00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:60:80:31:af:a9:a1:55:fb:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=bf6619eb-8ea0-4a45-bd9c-cf5c7e3b3fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:9a:de:b1:07:d4:7e:af:9b:a8:c6:ed:2b:
                    9a:e2:37:b4:72:43:9f:34:1a:49:aa:a5:ac:d8:af:
                    60:40:95:31:28:c5:cd:ba:5b:b5:a2:77:f4:5a:ae:
                    22:41:f6:e6:cb:96:25:4a:64:da:e5:85:13:3c:8b:
                    8e:82:97:2b:38:cd:85:a6:71:0f:e1:ae:a8:f0:f1:
                    e7:23:76:92:d7:2c:43:70:ec:3a:8f:d6:60:dd:38:
                    eb:b4:12:15:f7:4b:5e:d6:2d:23:95:87:ee:bf:66:
                    2c:59:b4:7e:82:42:7c:74:0b:3f:bb:35:07:ab:0e:
                    2d:e9:db:41:97:86:1c:5b:81:f9:dc:76:78:ec:cd:
                    2f:ec:bd:35:0d:58:81:e8:66:c7:65:ae:24:1b:33:
                    31:f1:e3:3d:97:34:65:d9:ca:03:86:f2:42:07:d3:
                    f1:8e:a3:81:92:b5:8e:22:5a:90:8b:d6:d6:66:cf:
                    c8:18:7f:88:91:7f:af:80:19:e2:44:df:39:3c:e5:
                    2c:86:aa:47:aa:c3:c8:37:4d:58:b8:d2:19:4c:29:
                    e7:97:a7:e1:82:57:bc:7c:1b:8c:71:24:d4:b1:3b:
                    9f:32:70:df:b5:27:20:b4:d5:63:a6:88:10:8c:e1:
                    33:69:d4:61:be:17:6c:b3:e3:5c:45:9e:7c:eb:2f:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:25:3E:61:EE:D0:32:77:93:45:1E:E4:0C:9F:73:0A:B0:F7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/f813b92d-1049-3324-97d6-cf95a944b3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:ce:4c:81:13:f5:b5:0c:85:a2:9f:c7:ac:fc:c7:9a:dd:
         fc:b0:1e:6e:4d:94:a1:34:15:e7:db:55:b0:b1:50:e0:e6:6c:
         a9:4e:f7:78:f5:03:9b:d7:4d:d9:71:96:ed:fd:f9:15:1e:89:
         0a:fd:db:c2:3f:53:27:07:23:19:4e:7f:38:a2:7b:5a:8c:8e:
         35:60:a8:f7:8a:9f:2d:af:78:17:c2:b8:cc:5a:29:94:c5:2a:
         8f:c8:05:01:04:08:2f:4a:09:bb:c3:d6:14:91:34:61:85:99:
         1e:21:bf:72:8f:49:3b:32:ff:85:b1:38:0f:29:63:69:f0:5c:
         56:64:f5:31:23:de:31:0f:50:8a:ca:3d:77:99:45:34:c1:a1:
         90:bc:25:09:50:6b:73:40:2b:02:fd:ab:0c:ff:c8:27:a8:b2:
         82:97:ff:37:70:d9:32:f1:2e:4a:ac:1a:df:28:cc:ec:58:65:
         4e:7b:48:6c:b9:24:fb:51:97:b8:d5:67:0c:3a:f2:c5:e9:a0:
         79:21:b7:bd:62:6e:8a:bf:8e:5a:8e:05:9a:32:29:e6:e4:30:
         90:1b:36:86:1f:e7:78:18:11:b0:9c:35:b6:ce:d2:d0:e3:1b:
         82:10:f9:93:17:a2:76:45:37:19:58:73:10:ee:56:4d:22:59:
         42:58:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:19:35 2025 by rpki-client