Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa
File:                     7fd129f3-1c17-3e2d-a77a-d605e894455d.roa (raw, json)
Hash identifier:          EElgfAav/nwSBtpLLadE5BoxSnNpfPnAskO7if7us7s=
Subject key identifier:   40:84:1D:E4:BC:98:6A:EC:19:D1:CC:F5:64:32:2E:51:3D:B7:26:CF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC9DB9784739FFFDCD08D6380
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     23473
IP address blocks:        2607:f750:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:97:84:73:9f:ff:dc:d0:8d:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=8b82bb86-d193-45c1-9c2e-540185141547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:ad:d6:f7:37:75:0b:eb:10:32:2f:06:e8:
                    fe:46:14:30:64:a6:21:65:af:00:3d:0b:c5:5a:a7:
                    e5:94:0c:20:51:2e:94:9e:92:b5:28:42:6e:b1:9a:
                    8a:29:d9:26:73:df:96:49:a8:17:4a:0e:bb:0c:1b:
                    f5:75:29:5d:5f:89:e4:a5:52:78:6d:34:5e:81:25:
                    1d:6b:05:9e:f1:ca:75:6a:f9:d9:bf:74:97:74:b4:
                    36:ac:aa:33:09:17:cb:22:ca:20:93:9e:67:59:01:
                    b4:57:eb:1c:b2:bc:7b:a2:d4:f9:af:eb:a3:13:5a:
                    ab:46:7c:36:a1:d4:b2:2f:6d:7e:02:ce:03:c5:16:
                    aa:c0:79:7f:04:19:b3:45:72:67:f9:87:77:ff:ea:
                    3e:55:af:65:df:f2:a6:82:c5:e4:58:9c:3b:63:d5:
                    ec:35:9b:54:75:62:aa:5b:24:c9:3a:07:2d:a6:3f:
                    91:6c:20:a5:1c:6e:34:27:ea:25:f8:ef:1c:9a:77:
                    9e:c0:c8:cc:6e:72:fa:96:72:13:e3:ee:b8:f7:07:
                    b7:e0:ea:67:31:c6:72:78:84:c5:48:26:d4:d4:00:
                    51:eb:26:e3:3b:5d:e9:99:7e:d0:86:81:4c:5f:31:
                    1e:a0:2c:bd:39:b7:38:21:cc:7b:6b:e0:fd:02:82:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:1D:E4:BC:98:6A:EC:19:D1:CC:F5:64:32:2E:51:3D:B7:26:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:2a:60:bf:df:b8:e6:34:c3:90:b4:b7:69:4e:78:ef:7e:
         ff:11:3e:b9:b9:fc:47:c1:10:cc:4e:b0:fc:12:b9:f5:c7:94:
         f0:46:1c:be:89:8d:b5:19:17:3c:d6:ef:b0:ef:b2:bf:8c:46:
         2d:93:0f:0c:c4:94:1a:d1:0f:3f:a7:f1:48:98:c9:65:65:6c:
         13:46:86:dd:59:95:fc:44:50:b2:22:30:de:b2:75:f9:ac:09:
         76:4c:ae:0f:f0:1c:5d:fd:b6:8b:03:26:66:88:28:b0:f3:29:
         63:7b:c4:78:f6:c5:7d:d0:4a:4b:14:b5:a7:9b:9e:de:b4:42:
         30:b1:e3:93:b5:3b:7c:df:de:df:93:28:0b:2b:c7:61:59:19:
         15:36:9e:41:9a:14:3e:f6:7e:77:4b:d2:0b:55:3a:d1:b3:df:
         18:a4:ef:18:f1:e9:66:40:0f:b2:99:2e:a2:23:75:db:3b:a7:
         dd:20:c0:d3:67:dd:50:c2:61:b9:61:61:36:fb:04:3a:05:45:
         ce:ce:cd:00:b6:cf:a9:98:e0:f2:28:2e:0d:d1:15:dc:ca:fe:
         3e:f3:aa:fe:76:6e:74:6a:9a:ef:36:87:5d:df:f2:01:f1:d8:
         d4:09:02:2c:02:53:a6:55:2d:60:70:72:10:9d:e5:d2:de:88:
         02:03:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:54 2025 by rpki-client