Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa
File:                     a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa (raw, json)
Hash identifier:          Px/mP8yza6hWK87/rRvOPqYpF98SBalPje/8LwkI1Uk=
Subject key identifier:   0B:6F:F6:7D:7B:98:87:38:E5:96:98:B2:75:51:67:31:C4:20:BF:7C
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584A560052D25FE75C9B954668C0
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7896
IP address blocks:        2600:900::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:52:d2:5f:e7:5c:9b:95:46:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=9a3bd33c-eff0-45b0-a1c4-5552bbd1dcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:90:c6:b1:49:60:75:b4:ad:3d:63:79:72:
                    1b:85:90:bf:8c:d5:52:4d:7c:35:2b:8f:0e:99:86:
                    86:85:0b:43:4b:08:cb:8d:8a:2f:af:21:62:b4:e6:
                    1b:d2:91:0b:9e:5b:5a:7e:4c:0a:5d:d0:15:b9:b8:
                    cf:f9:5b:c4:db:af:4c:a5:38:24:ad:dc:9a:56:09:
                    cb:17:8a:c6:33:bd:6c:7d:db:b6:9d:ed:ae:41:8e:
                    6b:3e:0e:1e:dc:17:8b:f8:09:08:aa:3e:21:a1:34:
                    8c:5d:7a:88:99:98:61:51:3d:48:2f:0a:47:58:fc:
                    a0:18:db:ad:e0:ff:9a:05:61:b6:5f:64:1a:e2:a9:
                    10:6c:08:6d:06:6b:c0:5f:ca:d1:c0:6f:31:94:34:
                    16:0e:b2:4a:43:da:9d:33:57:ff:7c:9b:eb:33:63:
                    a4:35:ef:1a:80:e7:96:72:3e:80:4f:24:3e:6c:84:
                    d4:3f:8e:d5:e4:d8:19:23:a3:8a:85:84:fe:37:8e:
                    a0:60:9a:6b:44:c8:2b:a6:8a:a4:55:c0:d9:1a:47:
                    e1:5b:70:dc:b5:8f:aa:80:70:59:0b:ec:35:80:9a:
                    03:bf:e3:93:51:00:42:4b:0f:a5:26:6d:11:d4:fe:
                    52:0c:c2:be:03:d0:1b:04:33:cf:6e:70:6d:1d:9b:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:F6:7D:7B:98:87:38:E5:96:98:B2:75:51:67:31:C4:20:BF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:900::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:8d:fb:4d:7a:7e:6f:7f:9f:21:07:bb:be:ce:60:b5:db:
         79:ad:71:18:21:e5:ff:01:08:ad:15:60:6f:bd:39:b0:2e:43:
         9f:9e:bc:6e:af:a1:cc:99:dc:cd:c6:28:fe:89:a1:59:97:19:
         68:ca:94:8c:e5:d4:ca:b7:19:1a:38:35:0a:84:c1:54:9b:6d:
         9a:3d:3f:32:da:3b:11:1c:16:4c:4b:cf:74:f9:ac:a7:5a:30:
         43:82:54:a9:ae:32:2b:88:55:59:68:df:bd:2f:7b:7a:0a:cc:
         bf:80:de:54:1d:53:43:d0:f9:09:07:23:2f:9c:fc:9e:b4:e1:
         30:6c:c0:ff:c2:27:dc:68:b1:ef:8b:ce:15:52:b8:86:99:d1:
         52:ce:73:57:0a:be:80:28:05:3b:c3:cf:e6:bc:b7:27:a4:24:
         8b:7a:d0:4d:e4:66:d0:2e:1d:94:8e:59:ae:78:5b:72:06:29:
         2f:f1:f2:65:d6:d3:4b:87:79:5a:4d:58:f0:32:f7:bb:78:39:
         f1:e0:16:96:31:fc:1b:2c:ac:e6:70:6b:e3:4a:eb:48:5f:6f:
         ac:ac:a1:63:1f:40:61:70:95:0e:c4:4e:1e:e1:b9:a5:11:b4:
         0b:f2:df:c1:5d:a1:c9:92:91:59:e5:91:47:46:71:ed:a5:93:
         79:d3:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:32:31 2025 by rpki-client