Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9b1e4a7e-64ff-326d-83c9-8bfa101d4749.roa
File:                     9b1e4a7e-64ff-326d-83c9-8bfa101d4749.roa (raw, json)
Hash identifier:          SqzIW527qogrcPwJfLHRwNSv1Hc1PU+TFgdXZ2G4Re8=
Subject key identifier:   26:73:7C:54:BB:76:C3:2E:E2:D6:C8:1A:EA:69:92:45:9E:20:1F:6D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A506AF6929F290DD09F50E100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9b1e4a7e-64ff-326d-83c9-8bfa101d4749.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     23473
IP address blocks:        2607:f750:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f6:92:9f:29:0d:d0:9f:50:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=dc7c5ec3-d702-46c6-bf2d-8f04e2d9b46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:6a:6c:8b:43:91:17:8b:d8:88:11:e7:1f:
                    45:c8:45:4e:72:b8:f5:d1:9f:8a:35:18:40:eb:86:
                    90:cf:e9:76:0a:1b:04:39:4d:1f:fd:76:4f:8b:c0:
                    38:04:7f:8a:08:e0:1b:dc:1b:79:78:8f:ad:05:c1:
                    1f:e9:39:4a:3c:0b:97:e7:77:83:9b:30:cb:dd:92:
                    76:02:4a:24:d1:e1:d7:c3:88:da:fd:58:7b:3d:99:
                    ad:c7:9a:f0:0a:e7:73:68:89:4d:c1:7f:dd:ce:5f:
                    90:7d:cf:a5:d5:14:72:c1:07:30:c8:59:e6:0b:92:
                    86:07:68:75:c0:19:6a:e2:2b:b9:6a:af:7c:39:51:
                    58:9c:59:fa:97:fc:72:4b:f5:04:dd:33:21:ef:55:
                    db:cf:97:f3:c9:9b:4b:f7:d6:21:80:4a:43:38:8d:
                    8b:5a:c3:ab:de:fc:1d:06:ca:9c:4a:59:43:ab:e1:
                    3d:66:c3:b5:f5:c6:01:39:6a:0d:28:23:95:3a:a4:
                    20:7c:ca:c0:86:d4:63:0d:9c:f4:be:db:ed:d3:86:
                    61:5b:ed:1d:42:58:71:e0:ce:0e:80:fb:c1:0e:42:
                    c7:72:f9:04:6c:6d:29:78:6b:b1:e6:48:38:3f:0d:
                    f7:f9:37:a1:f4:39:3d:73:35:12:2b:8b:61:57:e5:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:73:7C:54:BB:76:C3:2E:E2:D6:C8:1A:EA:69:92:45:9E:20:1F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9b1e4a7e-64ff-326d-83c9-8bfa101d4749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:37:e3:9a:e4:29:01:44:b0:ea:97:84:83:5f:b1:43:ba:
         95:41:ce:f2:dc:0a:6c:0c:5e:b9:ca:f9:a5:4c:28:f0:17:81:
         3a:61:b8:31:e6:be:d3:df:bd:49:a0:bc:64:6e:a0:81:af:47:
         ff:d2:ce:27:35:cd:16:e3:cb:c5:dc:ef:6e:d6:13:02:f1:76:
         3f:3c:32:b5:27:2a:77:bc:47:88:7c:8a:c4:af:ac:3b:35:ea:
         2e:5a:a7:40:69:fa:94:29:67:49:3a:fb:88:a5:ef:f1:36:7c:
         f2:1b:0f:f2:2a:69:94:b2:1d:17:ad:79:05:48:af:0c:60:e6:
         3c:70:97:0e:b2:1e:62:b7:f5:10:28:db:ab:1e:be:c8:dd:83:
         1e:47:e2:f1:13:4a:83:c1:0d:06:a3:a5:39:f0:41:20:bd:b4:
         71:6a:e9:34:43:52:8a:7f:13:38:97:cd:ea:9a:0b:bd:fc:f8:
         9c:12:6f:78:5c:11:2d:94:1d:a3:af:0b:1f:93:08:e0:7b:72:
         6d:26:66:84:c1:d9:20:b1:86:9a:e3:2c:b0:b4:59:9e:93:8d:
         81:07:ee:f8:88:2f:28:a3:16:14:f0:a1:b2:87:0b:fd:c4:c3:
         d9:0e:c5:a8:c0:ce:de:96:c5:f2:1e:41:db:10:47:01:7a:d8:
         9a:5f:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:43:29 2025 by rpki-client