Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
File:                     2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa (raw, json)
Hash identifier:          gKE+MDQd7L9c4CS0lFRo/RpT9eIoQ73mUjmSSa5Baj0=
Subject key identifier:   22:56:E1:01:77:25:FD:10:8C:85:A3:18:9D:30:1F:05:96:02:0E:22
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F4328584A07D5369F89A611EFE7CB0348
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     13727
IP address blocks:        2606:7080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:36:9f:89:a6:11:ef:e7:cb:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=4fff46cb-cab0-423e-8644-bd7bc595cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:32:26:df:9e:f0:e9:24:e8:e6:f5:30:d1:
                    f2:04:58:cd:07:da:f2:f3:e6:0f:b1:6c:d8:80:72:
                    1a:7b:79:7f:f5:bb:07:8a:77:2f:b7:e7:27:22:a4:
                    46:e4:0e:37:90:fe:45:f9:80:e4:d6:21:27:ff:d5:
                    20:56:43:b6:48:1d:42:fd:a9:b5:46:84:3d:03:eb:
                    69:fa:29:28:7b:ab:2b:8a:bc:b1:1e:13:d5:73:49:
                    ea:ac:06:6f:d6:f5:c4:c6:69:27:b8:4b:94:02:3b:
                    35:26:da:32:bb:8f:9f:15:65:ab:d6:46:3f:f8:d4:
                    7e:79:cc:56:ba:ba:b9:ea:bd:ab:14:a7:6f:39:18:
                    3d:55:a2:20:49:4b:61:27:2a:20:24:60:65:12:9d:
                    7e:cd:28:36:47:2b:8b:58:6b:22:44:d8:f0:73:9b:
                    ed:00:b2:61:c8:bc:a7:bb:cd:b0:1c:b8:0c:9a:0f:
                    a0:e0:87:c8:62:0d:e4:c5:6e:0b:39:8a:61:27:71:
                    12:bf:2c:63:80:1d:01:b6:a4:af:87:ab:ec:99:5f:
                    3d:de:c6:98:57:93:a8:a8:3b:9a:14:75:13:0f:38:
                    98:f4:f4:69:5e:0b:b6:89:ed:d3:fd:a8:e1:1c:5c:
                    3e:db:ab:8d:9f:cc:8d:3c:b9:89:e5:9c:11:3d:6c:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:56:E1:01:77:25:FD:10:8C:85:A3:18:9D:30:1F:05:96:02:0E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/2190bd3a-2a25-3c47-bb12-b5c7711c4722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:4f:c9:c0:1c:58:17:0a:cd:45:47:00:da:7b:14:73:3f:
         6a:6c:dc:76:8f:6a:db:cc:47:06:f4:bd:9c:87:b7:fb:ef:07:
         a2:d8:37:bd:0d:81:93:7c:ce:f6:03:e1:6a:35:13:2e:e9:0a:
         ce:92:e4:d7:8a:dd:64:58:29:d3:7a:d8:de:59:f0:31:c4:f4:
         69:bd:7d:25:6c:c4:e9:df:9e:f2:72:87:75:ca:02:27:b0:4e:
         e4:a7:0f:9f:03:77:87:86:e5:9b:f1:60:dc:02:db:3a:8e:3f:
         b3:1d:6d:25:43:f7:78:52:a8:ad:f7:8a:4c:91:c0:a3:84:02:
         19:ec:a7:65:4d:86:93:ef:98:15:07:b7:3f:74:55:12:fc:7f:
         9c:7b:c2:e7:df:ef:9f:df:51:7a:7e:92:5e:d4:6e:d7:81:51:
         35:23:c5:4f:89:ee:d5:b2:c1:ca:80:3b:da:96:87:a0:68:63:
         87:93:c6:55:6e:89:0a:fd:0a:92:cd:58:d3:2c:0e:23:0b:92:
         9a:fe:fb:64:50:13:37:1b:20:54:f5:44:a4:b1:9e:7b:fb:fc:
         d2:b7:7a:18:82:b9:57:8c:47:08:ab:ff:21:9d:ba:12:19:60:
         97:7b:fd:5f:44:6e:ab:9a:1c:63:ee:d5:c0:30:99:b1:88:03:
         ea:2b:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:36:43 2025 by rpki-client