Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa
File:                     cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa (raw, json)
Hash identifier:          k2XJSnEvts1GNrVOuhE0KZm8xRgj1BWlP/zAnbGZz5M=
Subject key identifier:   C3:14:6F:56:7C:16:4F:FA:65:7B:96:47:8A:FC:06:71:EC:96:A2:D6
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584AC2E10A5FFD5EA3A1F315BE50
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2607:5f40:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0a:5f:fd:5e:a3:a1:f3:15:be:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a7167069-2729-42d9-b367-b47c88c8d2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:58:97:5a:0a:28:16:4b:f7:be:d7:a0:6a:
                    df:49:a3:a1:e4:60:5b:53:db:c1:66:2a:62:3b:86:
                    7d:d5:5f:82:fe:88:43:a4:4f:3e:26:22:c5:0f:77:
                    7c:99:25:e4:a9:4e:8e:8f:1d:6f:58:30:c8:8d:e7:
                    a8:50:88:d2:55:78:4c:6c:b8:36:1f:80:35:17:30:
                    59:b9:4c:5f:a8:dd:99:8c:17:b2:c9:30:8a:7c:46:
                    45:85:8b:40:7d:bc:12:fc:42:78:71:f8:d3:3a:07:
                    20:e5:8f:b7:ec:0d:03:41:be:ac:fa:4f:fa:84:54:
                    c5:96:3a:88:f0:cc:56:69:89:62:1e:5d:fd:f5:c2:
                    11:51:e2:1b:40:85:ce:ee:3c:22:15:f8:b6:30:ce:
                    b7:5f:35:53:e5:c4:35:93:82:ee:61:3e:97:0d:0f:
                    1c:26:7c:50:c5:22:3f:93:e1:52:1e:31:4c:bc:ed:
                    e6:03:73:e9:cd:88:cf:64:d5:f1:da:c3:70:8b:a5:
                    27:3a:e0:ad:89:1e:fc:96:06:ba:76:e0:32:20:08:
                    9f:76:a6:8a:3b:32:24:00:76:d0:60:68:0a:5c:5b:
                    fd:1c:21:b7:69:5e:88:97:c3:9a:db:5b:f4:1c:31:
                    cd:b0:dd:e7:74:6a:06:4c:cd:f8:06:fd:44:3d:63:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:6F:56:7C:16:4F:FA:65:7B:96:47:8A:FC:06:71:EC:96:A2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/cef479ee-fd92-3cfa-a85b-31f23ee4283d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:15:70:a8:f4:d2:a4:5e:60:35:2b:a3:41:2d:b7:30:cd:
         7c:27:f6:7f:73:f9:fe:8d:1c:4c:51:14:e6:0b:86:cf:ed:25:
         3e:48:9e:46:fb:50:92:7c:eb:ee:db:bd:1e:f4:be:47:43:44:
         70:8e:13:28:5b:99:3a:63:cb:be:c3:ee:11:3e:76:14:e2:03:
         a2:77:12:2f:08:45:ed:41:9a:70:da:9c:b4:05:6e:9a:4f:06:
         b4:00:6b:f6:ca:67:35:29:6c:78:ed:b3:ab:ff:4d:ce:21:63:
         51:7b:8c:33:b4:45:e7:57:c6:75:35:24:2e:36:dd:f7:c0:ab:
         ef:bb:95:46:76:1e:bf:47:4a:1b:bf:35:07:09:c3:ac:17:d8:
         e1:fa:b8:3f:99:96:d2:80:9f:47:fc:be:89:4f:db:e0:93:03:
         97:45:f3:94:74:7c:db:20:09:f5:67:2e:3e:75:92:32:85:bf:
         19:90:ed:f4:65:4d:fa:cf:7c:16:4d:df:86:a1:1d:b0:65:ef:
         aa:a3:44:35:e8:59:fb:78:b5:44:f5:69:08:09:8a:92:e4:f2:
         7c:04:16:8c:d5:31:a3:e7:4c:c6:de:d1:dd:f9:c5:0d:8e:6e:
         f3:38:0b:f2:a4:d2:11:06:9e:62:b8:ae:28:19:f6:3a:b3:00:
         f4:76:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:13 2025 by rpki-client