Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa
File:                     53f5e127-829c-3673-95ef-b15b53f6e2de.roa (raw, json)
Hash identifier:          4lQsfi1HohYVA8twaY8PCNY7/s5kRh1fYM8+3EzC2PQ=
Subject key identifier:   0E:C0:01:C4:3A:94:38:60:BA:79:83:7F:E2:09:6D:C9:3C:2B:07:D2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1F453F22E28CCF823AF1140
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa
Signing time:             Tue 05 Aug 2025 17:04:04 +0000
ROA not before:           Tue 05 Aug 2025 17:04:04 +0000
ROA not after:            Mon 03 Nov 2025 18:04:04 +0000
asID:                     23473
IP address blocks:        2607:f750:2f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:f4:53:f2:2e:28:cc:f8:23:af:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 17:04:04 2025 GMT
            Not After : Nov  3 18:04:04 2025 GMT
        Subject: CN=4a705c92-f164-46ab-95bf-f1af74f0c38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:0d:61:db:63:75:f3:c8:f1:23:05:b5:9c:
                    ca:3c:6f:ca:7b:86:ff:2c:45:b7:50:f3:18:18:53:
                    d6:31:93:8c:ef:d4:e0:cc:1c:2e:b1:ee:f7:3a:1a:
                    0f:13:03:2d:38:66:8a:d8:43:d5:10:7e:54:e6:94:
                    c8:dd:95:a6:a6:46:e8:df:2e:ef:04:45:d1:3b:bc:
                    a2:2e:3a:ce:98:ff:d6:ea:54:24:5c:6a:dc:a1:2a:
                    81:ee:7e:33:9e:59:09:d2:0f:d7:6d:2b:88:5c:06:
                    90:ae:c3:29:1e:e2:10:30:fd:8e:3a:ac:0c:6f:38:
                    62:26:c1:4e:e6:0e:ce:cc:cf:84:28:0e:55:68:13:
                    cf:0b:3b:7c:e8:4e:04:e2:a0:0c:d5:29:ce:7c:9c:
                    85:e5:f8:73:b4:af:3e:d3:b0:65:7c:10:d7:75:0d:
                    54:41:35:c5:70:76:10:e3:33:fc:01:ee:ef:dd:88:
                    1b:c9:2b:20:c3:32:76:89:5c:68:e2:4f:80:00:56:
                    35:fb:ff:42:65:b5:60:fc:f7:73:71:33:87:32:0d:
                    c7:2b:84:99:ae:16:f5:39:93:bb:97:a1:d2:cf:66:
                    0d:ef:32:86:ac:7a:b5:c5:e3:f5:72:2d:41:2c:62:
                    f0:bb:64:15:0e:20:97:6b:7f:ff:47:8b:6e:18:2f:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:01:C4:3A:94:38:60:BA:79:83:7F:E2:09:6D:C9:3C:2B:07:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:94:e0:8c:c3:bb:58:dc:f7:bb:52:a3:b1:9a:93:88:e6:
         8c:95:6c:f3:49:00:6a:08:b6:4b:db:dd:2f:43:bf:f8:41:7a:
         b7:78:36:e8:4c:40:3b:e9:c3:81:f7:e7:87:a3:23:1d:52:32:
         38:78:31:e1:ab:2c:c1:40:c5:d5:8f:cd:52:09:b8:ef:48:7c:
         01:03:92:c9:5e:88:f8:90:f4:54:e0:06:bd:57:f7:fa:1f:4f:
         75:3f:41:03:14:01:f1:51:bb:1c:00:09:ab:6e:9b:a2:8a:32:
         ba:27:49:2a:6d:e7:ed:74:6f:b7:b6:f5:6f:65:7c:61:c1:54:
         e6:54:a4:98:8d:a8:05:af:9d:c4:42:c9:db:e4:fb:a3:a3:11:
         a5:23:fa:27:67:90:38:7d:e7:39:1d:30:e5:fd:36:f9:8c:ac:
         e1:ad:a2:0f:43:a2:8b:74:ec:6b:3a:d0:f1:c6:9a:a0:4f:6b:
         a1:de:f5:91:98:78:5d:7a:eb:75:c3:94:b2:9d:b5:d3:ca:cf:
         1c:60:e2:b1:6f:17:fe:97:e5:40:fb:14:c4:99:cb:25:10:21:
         6f:bf:ba:08:f7:94:98:3f:69:1b:31:83:d4:f8:b5:cf:29:b1:
         f1:65:3b:ea:00:77:f7:1c:2e:e5:56:69:a4:61:06:1b:b4:46:
         79:4d:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:18 2025 by rpki-client