Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
File:                     af9a9b5b-da9e-3336-9702-74ff3b725355.roa (raw, json)
Hash identifier:          CxYnR9S7GlnQuBDGzg2gZNP6pmzlS2SD/VN78K+nSyo=
Subject key identifier:   95:88:44:45:19:3A:E3:99:BB:F5:82:47:B6:E3:D2:6B:61:FB:56:86
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584AE196840EDF9ABD626335AD40
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7065
IP address blocks:        2607:43c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:84:0e:df:9a:bd:62:63:35:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b196192b-2ee9-46f8-8aa3-61497095993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:2a:32:0f:5a:db:d1:6a:6b:a4:66:8d:be:
                    72:c8:52:af:31:ac:ca:06:e6:25:e2:fd:5a:fd:4f:
                    f8:8f:f6:4c:3d:f6:d8:50:f1:85:bf:34:e9:0f:fd:
                    72:e3:5d:1d:ab:22:5c:97:10:6d:68:ad:a7:7e:4d:
                    7c:1c:89:58:ed:15:41:5a:3a:fa:18:38:79:7d:fd:
                    ed:f1:be:66:9d:88:bc:2e:65:5c:24:e3:49:d5:8a:
                    b0:40:fd:57:cf:1b:74:e9:90:45:85:51:56:a2:92:
                    98:d1:31:6e:1e:96:1e:07:63:36:b2:a6:b5:69:fc:
                    bc:ae:16:ee:77:5c:fb:01:bc:bf:f3:9a:cd:a7:c2:
                    c4:bc:74:3e:92:cd:cb:e1:30:da:02:17:c0:d5:55:
                    31:51:4d:57:b8:b8:99:b8:ad:c5:ce:c1:b8:7a:1b:
                    31:a0:98:9a:02:14:3d:55:4e:4d:96:b6:0a:6f:e6:
                    3d:17:32:7b:6b:81:55:e2:01:50:c9:40:52:a7:ea:
                    57:9e:77:4d:64:8c:fa:bc:2f:9c:ef:a4:88:bf:cc:
                    7c:2d:ed:e9:84:31:af:51:2d:36:2d:b6:10:4c:49:
                    ee:55:73:c7:1d:72:a6:0a:67:46:f7:a4:0b:3c:2b:
                    c0:2a:57:65:41:60:2e:ce:80:59:41:79:7c:a0:91:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:88:44:45:19:3A:E3:99:BB:F5:82:47:B6:E3:D2:6B:61:FB:56:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:43c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:63:ae:23:78:4c:54:8a:f7:2c:ca:c4:04:98:17:cb:74:
         5f:16:58:b1:0c:1b:63:7e:c0:23:26:62:a9:f1:0b:19:8c:e8:
         aa:6b:3d:1f:ae:6e:01:bb:4e:a4:15:0b:18:d8:04:92:0f:bf:
         32:50:cd:87:d6:51:90:81:8c:10:be:15:e7:14:c8:32:9f:ac:
         64:59:a8:da:3d:cc:89:28:46:45:a0:27:00:16:61:69:92:f4:
         fc:08:aa:67:0b:3b:e3:01:4f:dd:ce:5f:df:e8:00:9a:07:8c:
         a8:3e:7d:18:b9:d5:53:4d:d5:06:b6:71:32:c3:90:dd:fc:c4:
         cb:f5:0a:56:4f:70:44:0c:d0:36:1d:79:f5:0a:3d:ce:91:57:
         f1:47:8d:c6:b1:b1:00:3e:b5:64:05:0d:c5:12:c9:8e:7c:7a:
         00:51:e2:be:f3:78:cc:36:ce:3b:8a:58:87:b4:67:93:01:25:
         94:d3:f5:f7:a4:bf:f8:5e:2c:a8:a0:91:3d:29:d2:5d:89:10:
         d2:43:b6:fe:38:ba:fc:f3:b6:b0:2e:3d:ea:ae:d4:19:ab:3a:
         f0:b2:0e:8a:7f:1f:15:7b:60:ab:7c:83:52:4a:93:eb:26:a9:
         62:93:ca:4f:96:f6:3b:1b:b7:35:2a:ed:85:cd:c8:45:f3:39:
         82:11:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:06 2025 by rpki-client