Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
File:                     d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json)
Hash identifier:          MuEmdqwC+FkMdxNmPkbGxU2LIqHTAbEEGBhs0DQNRHc=
Subject key identifier:   A2:43:BE:AA:3F:7A:BD:61:7C:87:51:76:B1:E8:9E:72:3A:AA:04:0D
Certificate issuer:       /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Certificate serial:       010D0C9F4328584A1B600EDD5578CEDECE5B6B80
Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     399825
IP address blocks:        2602:80a:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0e:dd:55:78:ce:de:ce:5b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=e443ca69-6789-4211-ba87-f18c4020c1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:e3:1c:96:47:10:7f:a9:fa:1a:96:25:65:
                    97:75:64:e0:70:86:97:17:61:c2:d8:be:02:68:9c:
                    62:bc:6d:a5:47:65:85:f5:1f:56:aa:89:88:3e:fe:
                    64:76:14:65:0f:53:d0:e9:96:4c:b9:3c:d8:fb:a8:
                    27:bb:d6:64:b7:c3:65:85:69:24:60:c5:ac:70:9b:
                    96:05:88:43:ea:73:df:b4:23:ce:70:a0:92:e2:ee:
                    bc:cd:6c:d4:97:88:c1:55:cd:70:d6:9d:63:95:d5:
                    e4:a4:64:7d:0f:dc:3e:fd:86:d8:df:b8:ce:84:9e:
                    8c:1d:4e:30:7f:b7:cf:64:80:90:e3:c5:3b:50:f3:
                    6f:69:b8:24:33:b8:80:93:b3:78:b1:2b:c3:2b:4e:
                    6b:85:f1:8d:95:94:f8:e1:23:5e:9d:b1:4e:5d:fc:
                    93:f1:59:0a:c4:78:3c:0f:49:0f:59:09:ed:41:e0:
                    00:94:02:ef:32:ca:a8:d8:8e:49:9c:0e:3f:a9:98:
                    79:31:23:a4:fc:6d:8d:d1:5a:3a:f7:aa:20:af:c5:
                    27:dd:2b:2f:6d:5e:ee:b6:c2:22:7c:5c:fc:8a:ca:
                    31:07:96:00:fb:b2:cc:71:f3:b7:3f:62:a9:cc:fa:
                    d2:c6:19:a5:ad:52:51:7d:0e:eb:45:6f:e2:e7:17:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:BE:AA:3F:7A:BD:61:7C:87:51:76:B1:E8:9E:72:3A:AA:04:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl

            X509v3 Authority Key Identifier:
                keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:0f:2f:30:ab:90:71:81:05:32:7f:90:40:6c:2f:96:61:
         5a:d0:00:f9:d6:2e:7a:20:bb:c1:38:f2:b0:13:5f:ce:11:fd:
         32:03:4a:23:ab:f7:55:bd:67:72:d3:34:23:33:e6:73:42:d6:
         cc:92:2d:9d:e4:e2:9d:f5:02:d0:32:5e:0d:9b:0b:7e:fc:62:
         20:00:7d:2f:a2:d0:19:1f:c8:66:be:5e:c5:88:81:ae:b5:62:
         0f:e4:2d:38:d4:47:0b:4b:c5:66:28:d1:61:a6:66:54:0e:de:
         43:0e:ab:44:7f:f2:5e:87:e2:06:8a:32:6f:ac:49:bf:c7:c7:
         68:c2:6f:6d:b8:91:e4:ee:5f:59:32:5e:db:84:b0:64:01:db:
         c0:f3:93:ca:1e:e9:38:9c:1e:45:bd:e4:f6:cc:30:37:40:ad:
         16:d7:9f:1e:7d:d0:0b:8a:7b:78:d9:fe:35:a3:fd:a8:59:c6:
         c8:4a:fb:49:c6:ac:54:81:e5:c6:e2:05:be:47:38:c1:e3:06:
         82:59:d2:21:2a:7c:72:01:65:4d:1d:fd:27:5f:08:f0:cd:c2:
         eb:34:9e:51:d7:96:9d:2f:41:89:9d:39:36:4d:34:2c:1d:18:
         e0:3c:fe:30:1e:52:d7:74:07:c8:d1:74:66:63:32:25:83:b0:
         d0:6f:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:37:35 2025 by rpki-client