Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa
File:                     ff4f066a-1678-34b5-9861-cccf7607e203.roa (raw, json)
Hash identifier:          LkY1/EZxp6j5HZC2xRD1c9Cugcf4iJYz87i86+EaH2w=
Subject key identifier:   7D:B5:5B:12:61:A2:74:F8:5A:CC:4B:23:24:90:88:C1:4B:D3:58:E4
Certificate issuer:       /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
Certificate serial:       010D0C9F4328584A62908F29382C4FA4492E51A0
Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     40764
IP address blocks:        2604:edc0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8f:29:38:2c:4f:a4:49:2e:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=bb2e3a40-30cf-4713-b75c-34d83e81deb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:fe:36:59:95:e6:24:97:0a:0c:39:41:b6:
                    03:d2:de:4b:19:12:17:8e:88:a2:ad:44:d2:5c:fd:
                    db:17:c9:29:4a:78:86:9e:5a:c9:cc:37:06:b8:06:
                    b3:a6:11:0e:de:9e:31:ef:84:7b:bf:3b:72:54:47:
                    6e:8d:cb:ae:ee:dc:b2:fc:0c:4a:26:8b:43:05:06:
                    a1:91:95:74:ed:ca:a9:65:33:17:36:11:c7:d3:8a:
                    11:04:e9:83:e5:99:04:40:6b:d3:5f:c1:b9:aa:3c:
                    27:b2:d4:b7:7e:e8:a1:19:1e:3c:7d:1d:b7:48:74:
                    3a:06:9f:02:e2:50:ce:7d:aa:51:9d:5f:11:ad:72:
                    74:42:24:03:ae:2b:4b:d3:13:56:7f:78:41:d1:40:
                    5f:0a:1a:ac:38:d6:e6:3b:c7:7f:a5:06:6d:d2:35:
                    e1:92:4e:60:4b:79:a0:4d:8b:6a:64:c3:bd:85:33:
                    99:9e:4c:4e:94:e9:62:e0:3c:12:73:29:17:92:cc:
                    5d:36:c8:4c:6e:07:5e:8b:95:87:88:2b:ab:55:a9:
                    c6:3d:f3:28:40:0e:c5:5f:e0:76:69:39:50:33:b1:
                    5a:e2:77:e9:f4:ca:60:85:da:70:f9:a4:e9:c1:0a:
                    4b:d7:ae:24:5a:bd:55:cc:50:92:4d:a2:66:4c:43:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B5:5B:12:61:A2:74:F8:5A:CC:4B:23:24:90:88:C1:4B:D3:58:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl

            X509v3 Authority Key Identifier:
                keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:edc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:91:f8:af:ab:d2:9d:d5:f9:d4:cf:a3:82:7f:46:ec:2b:d4:
         0f:1e:25:11:c1:b9:bf:07:d2:18:eb:0f:02:1c:8c:42:68:64:
         2c:c1:a1:ff:e6:7d:4c:af:83:ab:9c:30:b5:5e:15:ef:80:3c:
         aa:19:90:b5:a1:d0:ce:9e:10:b9:b5:7c:62:e7:c4:f5:4d:98:
         1f:98:07:64:fb:77:29:77:09:e2:4f:8a:06:7e:61:26:98:92:
         b8:e5:67:3c:5f:94:ce:bc:a4:76:76:2b:af:1b:b1:21:62:c1:
         a0:36:b5:8c:6c:de:5a:6c:db:a2:54:17:d2:bd:a6:a2:9d:c8:
         2c:58:bf:68:35:c3:4d:1d:b1:5e:f0:a1:ba:57:e6:75:48:b4:
         76:4f:24:9e:2e:65:bb:26:ae:04:ae:ca:ae:1c:0a:fe:93:ac:
         73:9f:e3:7d:6f:dc:43:60:bd:ef:24:f3:bb:79:ee:f2:b3:a8:
         a7:ab:5d:24:fa:1e:7f:ad:e4:37:ea:11:11:e0:42:94:16:21:
         fd:f2:c5:5b:61:7c:31:01:79:84:34:3b:1c:fe:38:e8:01:0d:
         49:7f:2e:71:3f:68:81:da:e9:81:cf:a7:9a:d8:92:47:b8:68:
         8c:47:78:1f:c6:12:00:42:06:64:d7:59:66:b9:97:e9:65:c7:
         4e:65:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:40:25 2025 by rpki-client