Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
File:                     ee5e6bc7-e933-3011-ab89-2c7e76441156.roa (raw, json)
Hash identifier:          GIXq4rWD8rN6jvZGnx4ogqELD32Sx/r4TtgM3BaZXUE=
Subject key identifier:   21:82:02:DD:05:C5:39:0A:C5:F0:A2:CF:32:B0:13:2B:65:EC:E1:D8
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584A46A5ADE3469DB8F074EBD900
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     32024
IP address blocks:        2607:69c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:ad:e3:46:9d:b8:f0:74:eb:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=654d7aa2-be25-4b8e-a27d-0e83d99fdd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:aa:71:47:37:26:94:7b:87:51:cb:cb:c9:
                    88:6e:d7:81:c5:d1:36:41:e8:f3:83:c3:28:0a:77:
                    77:e0:7e:0c:23:10:84:e0:ed:ff:b8:5f:39:c7:6f:
                    cb:f1:fc:f7:23:0f:02:a8:32:b2:f1:5b:13:73:f1:
                    67:32:31:ca:89:35:41:cc:ab:46:81:f2:8f:6c:65:
                    30:7c:4c:f7:8d:e6:57:6f:8f:b8:0d:7f:af:c3:39:
                    08:17:3f:5c:bb:7c:32:9e:ac:5e:18:ce:13:5b:8c:
                    0c:75:e4:c9:18:93:00:24:b8:7f:bf:65:ac:2e:3e:
                    97:81:5a:c6:2b:73:7b:0f:d9:83:32:07:17:8a:26:
                    d3:c0:9e:03:fd:9d:90:a3:1e:50:93:2d:a5:37:09:
                    66:68:85:5d:b5:fb:64:63:0b:a6:f0:91:82:65:99:
                    96:fb:63:e9:ff:27:e7:16:96:c7:e7:34:79:97:a9:
                    cd:39:32:0d:1f:b9:6d:53:bf:3a:08:9b:8f:07:95:
                    78:70:c6:74:d2:3c:ee:77:a2:3a:64:65:8e:a6:95:
                    f0:09:07:d3:ee:9d:d8:94:07:b4:33:d6:83:88:99:
                    9b:26:08:3f:ea:72:5a:cc:18:f4:d9:da:e9:9e:4a:
                    69:f9:1e:98:42:73:0d:3e:f7:0e:ab:36:d7:f7:6a:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:82:02:DD:05:C5:39:0A:C5:F0:A2:CF:32:B0:13:2B:65:EC:E1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:27:d3:d9:74:cf:e7:85:cf:d5:af:26:e0:16:e5:2c:fc:
         c9:98:cb:2a:d0:20:62:75:e5:49:92:17:e4:f9:b2:fc:6c:51:
         18:71:9d:aa:aa:9b:1f:85:a7:85:d6:56:f2:12:d0:6c:c5:b2:
         bf:39:6b:7a:4e:83:2e:fe:73:5a:ac:06:85:41:5a:79:04:c1:
         fe:36:9d:d2:5c:e2:d3:0d:6f:24:e2:2f:25:b8:5b:e4:4d:68:
         65:6d:1b:5b:92:7f:f6:24:7c:f6:b4:44:4d:59:11:95:6c:f8:
         69:c2:86:e6:aa:1c:a2:36:c7:ed:d3:ce:b8:2e:e2:f0:17:ee:
         3f:d1:fc:e2:d4:05:f0:39:2c:40:bf:2e:2f:70:46:6b:24:65:
         93:8e:5e:18:e9:e6:b0:54:5e:5f:08:14:82:e2:61:5c:2d:a7:
         43:5e:9b:20:f6:e7:64:37:56:fd:41:0c:77:8e:e5:2a:f5:84:
         3f:2b:40:ab:67:bb:3e:83:a5:76:e2:23:ec:89:ec:33:7b:a5:
         de:41:84:15:6d:aa:e8:75:ec:28:7d:37:84:0a:f5:de:27:b0:
         0b:87:ca:6a:9f:2c:1a:c6:af:60:7e:a7:b9:62:a1:ee:72:2e:
         44:6a:41:96:e9:28:5b:40:a2:5d:05:fc:77:29:15:da:c0:48:
         72:93:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:11:45 2025 by rpki-client