Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
File:                     7aa82a3c-b900-3515-999b-3f371863fb0c.roa (raw, json)
Hash identifier:          k2vFspNfuEEiF/bpX41+urw10CGgVDgbpoPSaEkyY/M=
Subject key identifier:   DE:C4:2C:12:3B:3F:CB:6F:2A:26:C1:36:FD:0A:C4:20:85:EB:ED:E3
Certificate issuer:       /CN=1786b8ab-4949-4959-b26b-aaad20b28698
Certificate serial:       010D0C9F43285849C20A192D979CA9CDF811E1C0
Authority key identifier: E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20356
IP address blocks:        2607:640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:19:2d:97:9c:a9:cd:f8:11:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1786b8ab-4949-4959-b26b-aaad20b28698
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=eaa40e38-90ff-4104-8448-edc20b1c3f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:65:27:b2:33:b9:5c:dc:95:3c:b4:fd:56:
                    81:ca:dc:94:57:32:5b:74:33:fc:ee:9d:b9:55:73:
                    1a:e0:05:22:34:5e:6e:9e:9d:1b:6c:59:98:1b:e9:
                    8f:e7:11:39:6d:d2:ec:7a:46:fb:0e:04:72:1a:79:
                    57:b4:1b:28:eb:b4:5e:02:dd:9e:2e:3a:f3:86:a5:
                    7c:3e:9a:30:21:57:2b:f5:c8:57:78:ed:29:d6:1f:
                    20:71:b0:d1:cf:ca:c3:ab:b6:99:7a:03:e6:1b:69:
                    6b:bf:05:0b:82:0a:85:1f:0b:09:1f:14:cf:8c:8f:
                    1a:91:2c:18:49:55:7f:3d:2a:29:8c:6a:dd:d9:20:
                    63:2f:91:31:98:79:09:3d:f7:0c:4d:fa:2b:9c:74:
                    a5:dc:5f:27:63:84:72:f0:ec:17:d2:1d:d2:67:96:
                    93:92:1e:ae:a2:45:c1:d2:87:8e:53:6f:b8:86:0b:
                    6d:02:bb:ba:91:ca:eb:cc:a8:0d:23:46:5e:fe:f7:
                    78:75:f0:64:02:1b:35:f2:23:a0:62:75:3e:52:df:
                    a2:8c:31:a6:46:bb:16:42:04:86:1c:40:09:5a:bb:
                    8a:ef:32:26:d9:51:88:08:4e:56:5c:95:11:f4:8f:
                    fe:ba:44:db:e4:e5:b4:ab:59:ab:d9:ea:f7:46:72:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C4:2C:12:3B:3F:CB:6F:2A:26:C1:36:FD:0A:C4:20:85:EB:ED:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:22:32:15:20:3b:67:5b:a3:07:a5:ec:10:f9:da:f6:85:a6:
         73:e9:9c:b4:ab:ff:cc:9c:e5:e7:e0:c9:67:cc:a0:0d:12:95:
         2a:14:35:ec:30:3a:26:1d:bc:b5:96:9c:ee:88:f5:54:e5:9d:
         7d:45:43:c8:73:77:89:a9:c3:95:d1:5d:2f:b2:c8:dc:13:7f:
         50:71:4b:64:69:ec:eb:94:cb:33:d7:1a:27:d6:64:b8:64:e4:
         bd:4b:94:10:28:b0:49:7b:bc:d9:f1:34:ab:f9:9e:d5:ac:78:
         f1:ed:79:f1:38:33:b6:67:54:71:d5:e5:e2:56:f3:fc:07:58:
         dc:30:ca:3b:c8:79:38:3b:d6:7d:e4:4e:d1:fa:ea:24:6b:cb:
         f8:1a:1d:5b:09:e3:36:5d:ec:ed:89:3d:bf:06:ee:54:4b:f1:
         17:d7:ac:d9:34:e0:4d:41:a3:ce:a6:c3:57:e6:1e:03:0e:04:
         a1:44:ea:22:c8:d2:dc:78:7d:12:c1:47:55:5d:a7:db:0a:2f:
         ab:db:52:c4:93:1b:7c:dd:00:55:79:ff:59:20:85:d5:5d:ed:
         64:10:c5:bf:44:df:c0:17:13:77:c4:1c:88:9e:eb:fc:96:d1:
         9a:57:f9:86:6b:2d:a0:10:63:06:d6:2e:a3:d3:bd:78:e9:f3:
         44:aa:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:38 2025 by rpki-client