Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
File:                     c16ed97c-8646-379e-b507-327349487263.roa (raw, json)
Hash identifier:          gh1Bs0VerMeZAjOSELDI64yEKvtmd66PphLWrIITBnM=
Subject key identifier:   B9:E3:32:54:79:9C:8C:0C:4A:CF:17:B3:B8:49:DB:65:3F:94:79:B2
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584A58CB0AA10226D63D3FF4C080
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     215568
IP address blocks:        2607:cf40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0a:a1:02:26:d6:3d:3f:f4:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=5634ac86-9d04-43da-9b12-a50f816dd93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:21:d3:fa:4c:1a:7e:fe:33:06:c2:f0:43:
                    3b:91:dc:89:fc:0e:3b:f1:c7:57:17:39:69:44:a6:
                    2b:f9:c4:e4:45:07:8b:e3:a0:31:26:6d:2a:45:b4:
                    f7:64:3f:fc:2a:88:fb:ce:fb:7c:45:27:df:bc:89:
                    d7:47:de:44:da:4c:29:95:de:30:e5:45:ff:82:ba:
                    d3:7f:b8:42:05:23:22:4e:5a:fe:4f:d4:fe:89:4f:
                    61:6d:5d:4c:2a:9d:49:82:b9:78:6a:d1:f3:74:8a:
                    11:5e:76:f7:da:3d:4d:2d:5d:f6:26:86:d9:5f:2f:
                    a0:70:c5:3b:13:e1:3c:b0:ea:e7:4a:bd:b2:0e:f4:
                    52:b6:6c:fc:89:1b:06:19:ee:87:6b:22:d9:0d:2b:
                    00:11:0e:06:47:1f:22:a6:da:9b:85:fc:e0:cc:2a:
                    ac:cb:31:59:43:40:44:6c:69:cc:08:10:88:e6:cb:
                    7a:34:a8:30:a6:78:58:f4:53:bc:bd:70:7a:4b:4d:
                    e3:cf:d6:ff:1a:e1:9e:86:19:67:6f:21:90:89:7a:
                    f2:54:a7:e4:d9:68:0c:a4:c2:29:3c:ce:65:56:59:
                    97:05:1e:c5:51:1b:d5:6e:06:b1:6f:57:fe:24:59:
                    4f:a6:3a:74:26:51:a3:9d:7b:71:56:91:3c:75:15:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E3:32:54:79:9C:8C:0C:4A:CF:17:B3:B8:49:DB:65:3F:94:79:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:25:5c:bd:b0:32:fc:fa:d4:f5:9d:8e:49:4b:10:da:de:
         4f:41:c5:56:96:98:ae:d4:71:aa:18:45:bd:32:98:6b:57:c9:
         fe:3e:52:51:e6:37:a3:4a:ca:de:2b:8c:1a:d0:f8:72:5a:f2:
         1e:f4:fe:bb:8f:09:26:1a:ed:52:18:78:a5:34:81:ff:dd:64:
         a6:5a:56:63:b2:d6:6a:2f:4a:ba:92:a5:5f:9d:1f:5e:9d:20:
         81:a1:2f:ac:3b:31:33:67:e1:1a:c1:25:26:f1:da:41:08:67:
         ac:3c:8c:99:08:e2:15:f3:72:71:b6:5a:02:f6:9c:96:53:69:
         e8:9d:22:13:08:27:c4:b4:8f:a9:41:e2:c2:3c:aa:fd:7a:6d:
         1e:19:d1:0a:15:66:d3:15:00:2e:93:d2:6e:a5:6d:c0:48:2f:
         e2:c7:14:6e:bf:cd:5c:1a:95:30:89:e2:76:98:d7:56:01:e6:
         af:c2:32:8f:14:d0:59:41:06:be:6d:8c:2f:8a:6e:f5:ee:29:
         14:aa:ad:2c:1d:97:25:d4:8d:44:75:b0:a3:4c:86:90:21:32:
         b7:70:a6:ed:74:f9:fe:30:a9:e8:f6:cc:4c:a1:5d:ae:45:cf:
         b8:50:cb:32:66:ac:f8:93:c3:bd:ba:af:95:9f:88:ed:41:ce:
         bf:00:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:40:31 2025 by rpki-client