Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/7f6bb015-abd7-32fb-8fdc-86fc3d8c15bf.roa
File:                     7f6bb015-abd7-32fb-8fdc-86fc3d8c15bf.roa (raw, json)
Hash identifier:          P+RIpjW23j0zSm93IEeT2uhR9AyR0H12TZwh6EcOnio=
Subject key identifier:   9A:7A:58:ED:47:0D:5B:5A:35:EB:61:51:F2:83:B8:F1:F9:2E:83:1E
Certificate issuer:       /CN=798448e2-55be-4c24-8014-28c2c70dfc84
Certificate serial:       010D0C9F4328584AD3A0F7482A1B0D3C0B2AAB70
Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/7f6bb015-abd7-32fb-8fdc-86fc3d8c15bf.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     36601
IP address blocks:        2607:e580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f7:48:2a:1b:0d:3c:0b:2a:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=a02ae425-49a7-4288-9f9a-7b513989ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:55:4a:b7:7f:0f:75:fc:8e:24:62:5c:6e:
                    50:42:95:a9:2a:42:65:98:f7:f6:cc:0a:4b:62:44:
                    49:a0:cf:37:9c:54:93:ce:7b:b6:18:8d:d4:41:33:
                    93:ae:df:78:7b:1b:ff:78:a2:fd:4e:d6:fd:ee:23:
                    d6:8b:87:77:a7:c3:eb:6d:b6:e8:78:c7:cd:90:d3:
                    a3:f7:7d:4d:0a:d1:85:87:38:cc:47:8d:c1:fe:9a:
                    4f:3d:d4:43:f1:ac:ca:f3:16:01:f8:71:10:b5:9b:
                    f7:54:83:e4:c5:76:b5:3d:03:68:5f:68:a7:16:fd:
                    bc:ba:55:24:c9:3d:39:8c:76:4a:8e:10:5d:b0:db:
                    1a:93:96:cd:33:c4:2a:6d:88:cd:61:fb:e1:61:e2:
                    dd:27:46:1e:83:94:0d:5b:83:2a:df:48:cd:f6:d8:
                    15:80:1c:35:21:9c:ed:ad:dd:34:0e:29:6a:4a:c9:
                    f7:19:c0:16:7e:30:af:0a:0a:37:3e:5e:bb:8f:22:
                    db:57:6f:e8:c5:7e:ec:ea:15:75:fc:b5:95:d5:27:
                    cd:bd:81:6b:2b:38:c1:73:4b:af:b3:67:8f:a1:ab:
                    41:cc:89:36:ce:05:d6:54:f9:4b:c3:6c:01:a8:6e:
                    6a:06:af:4e:b4:6a:cf:46:06:d9:1a:38:40:2e:8e:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:58:ED:47:0D:5B:5A:35:EB:61:51:F2:83:B8:F1:F9:2E:83:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/7f6bb015-abd7-32fb-8fdc-86fc3d8c15bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl

            X509v3 Authority Key Identifier:
                keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:c7:dc:b9:ab:79:5b:b4:14:76:a5:50:85:64:9a:61:6f:
         7f:a8:3a:74:ec:ae:c0:8f:8d:40:8b:70:70:3b:96:b4:98:00:
         53:06:6e:82:de:8a:2f:08:c4:c2:cb:4b:3c:36:ce:44:b0:67:
         30:df:f4:06:42:a9:43:74:db:7b:76:2c:ab:99:c0:98:27:08:
         93:33:85:ed:00:93:06:5f:a0:f3:b8:00:93:17:d7:eb:77:ee:
         49:4f:08:ee:47:b7:ba:04:92:6a:88:a5:50:6c:48:a2:84:5d:
         18:00:37:6f:05:96:99:a4:71:91:13:ee:a4:ec:07:38:c7:b2:
         cd:9b:6b:2d:b8:5f:f9:b8:37:4b:df:ef:e8:2a:b7:02:83:42:
         ee:c4:b8:60:40:54:a0:6c:da:c8:e4:62:cd:84:d9:b5:85:0b:
         c1:3f:b7:7f:d6:c7:90:5b:ea:0e:6f:45:36:4c:e8:d1:39:b9:
         4f:7b:28:9b:62:cd:b3:8b:b6:34:a7:c1:a8:d6:b5:8e:c5:1f:
         53:eb:b9:85:e7:68:10:8f:49:49:f1:f0:d1:af:27:2e:4d:0b:
         fe:1d:22:33:4b:5e:1a:6d:35:06:5b:46:eb:b6:a7:3c:fb:d7:
         77:1f:4a:ef:af:f2:e3:b4:0c:bf:da:a1:3a:c4:f2:3a:fb:bd:
         52:0d:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:22:08 2025 by rpki-client