Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8622301a-4144-3a94-b59c-4874fe9ff2ef.roa
File:                     8622301a-4144-3a94-b59c-4874fe9ff2ef.roa (raw, json)
Hash identifier:          fnsncbwL8hiT/bqyIADoBUZJMc6mKHMvRtOHDBXn/RM=
Subject key identifier:   F7:7B:D2:70:ED:C3:D1:CA:49:7A:C2:36:D4:15:03:AC:1E:2B:F1:95
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584A1B600FA077678E19ADF66AC0
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8622301a-4144-3a94-b59c-4874fe9ff2ef.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     15204
IP address blocks:        2607:d600::/32 maxlen: 32
                          2607:d600:1000::/36 maxlen: 36
                          2607:d600:1004::/48 maxlen: 48
                          2607:d600:1750::/44 maxlen: 44
                          2607:d600:17a0::/44 maxlen: 44
                          2607:d600:1800::/40 maxlen: 40
                          2607:d600:1900::/40 maxlen: 40
                          2607:d600:1a00::/40 maxlen: 40
                          2607:d600:9000::/36 maxlen: 36
                          2607:d600:9750::/44 maxlen: 44
                          2607:d600:9800::/40 maxlen: 40
                          2607:d600:9900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0f:a0:77:67:8e:19:ad:f6:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=b607a5e8-bb7f-4218-adee-0a5c4353fb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:1b:4b:33:40:8d:6d:7a:de:99:f4:28:38:
                    64:6a:21:e1:4d:cd:b5:45:53:5b:8a:9d:23:a4:a1:
                    b6:de:30:06:51:c2:96:d8:85:3d:6b:5d:89:7d:e9:
                    c9:8f:96:69:95:8d:22:5a:ff:b6:93:9f:57:40:52:
                    fa:ec:87:fe:7b:d6:79:20:26:f4:0a:ff:c4:f1:f2:
                    0d:a8:45:cc:71:18:a8:67:72:db:1b:83:32:7a:01:
                    64:46:88:a6:4e:7e:d2:ca:96:e3:4a:af:ac:47:8b:
                    00:57:94:e6:67:09:e4:61:b7:ac:55:b7:fd:e3:d7:
                    e7:c2:46:b9:f2:f5:fa:c3:28:a3:04:db:bd:34:5f:
                    de:8a:e0:ed:88:ba:ae:82:39:bf:d0:48:60:95:d3:
                    cd:f8:11:d4:f2:04:4c:ab:cf:b9:fc:f4:2c:a4:cf:
                    6c:61:8b:9c:62:55:d0:b4:f2:fa:a6:b9:3a:be:15:
                    e2:13:df:de:0e:8f:99:df:73:38:3c:ed:83:77:d6:
                    e3:7e:ea:6a:62:29:b0:06:ff:15:a8:c5:ea:6f:69:
                    6f:d0:54:62:c1:04:60:e2:b9:50:a5:83:89:ca:a4:
                    85:00:b7:e8:62:d9:ea:85:af:a6:1a:14:64:41:35:
                    9e:46:c7:4a:7f:32:3c:e9:4d:8d:99:9c:0d:48:09:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:D2:70:ED:C3:D1:CA:49:7A:C2:36:D4:15:03:AC:1E:2B:F1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8622301a-4144-3a94-b59c-4874fe9ff2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:e9:16:8c:d7:4b:5d:23:f0:d4:6f:77:61:fe:fb:fe:98:
         4e:74:d5:28:14:fe:ff:62:0b:73:c7:4f:85:56:d1:f6:55:e7:
         8a:4b:d5:23:65:84:23:fe:ec:aa:f3:45:f6:86:c8:e9:e3:58:
         5b:38:64:c5:37:44:33:f3:f2:40:dc:d7:6b:d2:83:ad:3a:40:
         bd:ee:af:e6:f6:6b:21:a9:b2:78:96:ba:78:0f:ff:90:7c:df:
         db:3a:43:25:61:b2:b3:3f:d8:4f:69:aa:99:00:eb:c4:47:50:
         6e:d8:fe:8d:e8:3e:ad:6a:1c:94:5d:e6:13:01:80:6c:a8:74:
         9c:90:1a:0d:7b:55:ac:d4:64:10:f3:00:f6:59:ea:4c:66:91:
         b3:99:b6:13:fc:2a:14:32:bb:e7:79:69:eb:d8:06:f6:ae:96:
         61:91:ba:55:7e:66:db:e5:5b:55:d0:43:d5:8c:d3:3c:b2:5c:
         6b:f6:fb:9e:1d:84:3b:a4:87:60:01:7f:86:49:b1:a7:14:3e:
         48:3b:64:9b:19:0b:3a:42:a1:b3:20:32:ad:a7:de:eb:00:07:
         94:4f:20:98:47:92:8d:fa:72:77:ff:87:56:7d:1c:d5:49:9b:
         2b:62:13:27:17:db:d6:6c:c3:5c:d3:75:b4:e4:0e:19:4d:6a:
         5b:95:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:59:22 2025 by rpki-client