Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa
File:                     e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa (raw, json)
Hash identifier:          LCYbWDMc8rZxz9qrAMSIWs/PvNW58xFgpwIeeHSEscU=
Subject key identifier:   09:BE:12:1D:60:D9:45:72:9F:F9:93:66:93:BC:68:A2:E4:C4:D8:C1
Certificate issuer:       /CN=c8252214-88a3-4807-bbe2-b344c3be7f19
Certificate serial:       010D0C9F4328584A0C0555EC6DB4D64C7B518EC0
Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     25639
IP address blocks:        2620:78:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:55:ec:6d:b4:d6:4c:7b:51:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7ee2dec9-52be-4a40-9266-969fb6edb507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:e6:b3:7a:1b:29:51:4f:ca:2b:de:cb:a1:
                    c2:22:ea:2a:24:46:cc:95:66:4f:46:a1:4f:47:84:
                    9d:64:20:51:e1:5f:0f:2d:61:b1:04:36:b9:e0:c4:
                    5c:77:49:a5:df:d4:4a:ce:38:12:4f:95:4b:6f:23:
                    7a:7a:56:40:8a:1d:03:a0:25:d6:e8:56:db:8d:bc:
                    6a:9a:e2:a0:e3:73:49:a3:5e:36:62:ee:8e:e6:1b:
                    ca:70:96:02:a8:c9:0c:38:46:cb:2d:75:88:2d:9e:
                    17:66:9e:d0:9c:c3:42:0a:c7:ef:38:a4:aa:d2:41:
                    e1:45:66:57:b3:ed:71:cd:fa:72:cb:51:b9:86:ab:
                    78:7a:f5:cc:4b:7a:95:e6:55:5a:e2:8b:1a:80:64:
                    51:f0:8e:c3:24:d5:5e:86:b1:c7:fe:bf:43:d1:61:
                    c3:03:c0:7a:5e:ec:5b:b2:fe:43:f1:c7:e9:f3:20:
                    73:b3:e7:45:79:34:0f:8e:b6:1f:b9:62:fe:e2:31:
                    5a:63:d5:f6:9c:44:80:4d:2d:b8:83:df:b3:09:e0:
                    c7:83:8b:82:5a:c7:2b:0a:84:ab:26:24:2b:f9:21:
                    b9:64:65:4a:4d:55:95:78:0b:12:1f:61:48:88:98:
                    70:c2:14:3c:4a:32:60:5c:3f:49:40:a9:33:f1:f4:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BE:12:1D:60:D9:45:72:9F:F9:93:66:93:BC:68:A2:E4:C4:D8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl

            X509v3 Authority Key Identifier:
                keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:78:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:5d:13:7f:c0:65:69:ba:c1:ae:b6:dd:ed:81:80:35:f2:
         d7:9a:b5:9d:5a:6a:38:8b:bc:f5:0c:ca:41:fd:78:d2:83:5c:
         88:88:e6:d2:98:13:db:12:d2:d2:91:e9:f1:29:40:82:51:46:
         c0:df:ac:40:e0:72:66:6c:82:3e:71:5c:76:a5:e1:ef:23:72:
         a3:9d:82:12:11:35:8e:41:68:e0:ca:09:8b:4e:1b:e5:86:b1:
         83:6c:c7:66:c1:af:e4:48:c7:08:1d:af:91:36:58:2f:05:33:
         9d:e9:dd:d1:4d:5d:48:a6:45:9c:51:f6:14:2f:45:66:53:71:
         0f:14:c6:45:dd:6c:c3:e3:ed:39:e4:fc:62:60:db:a5:1f:05:
         c7:c4:16:80:73:e2:ff:41:15:c4:77:5a:e8:36:1c:e7:03:96:
         97:0f:20:a8:b7:6a:22:a3:6a:40:f1:4a:ee:43:5d:5d:9f:6e:
         42:07:fa:2d:6f:f8:0c:97:3c:fe:6d:e1:04:43:e6:83:36:96:
         dd:18:8e:da:97:33:e7:77:a5:8c:d2:9c:fb:cd:37:99:91:e9:
         a2:9a:a7:eb:f9:34:1b:af:84:c4:79:46:51:64:17:2d:38:76:
         b7:cb:33:fd:9e:95:f2:36:f4:a5:cb:85:74:6c:76:dd:13:30:
         2f:cf:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:30:32 2025 by rpki-client