Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
File:                     dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa (raw, json)
Hash identifier:          VA4R2/eIi7dCsuSOZ51Exo6Y5yiZ3dX4M7kNxsNPp+w=
Subject key identifier:   1F:4A:A7:66:72:E3:62:AE:47:E3:AF:8F:D8:A6:ED:AB:74:9B:FB:4E
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584AC9DB9EE7DAC7FB8696738940
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     43181
IP address blocks:        2604:28c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9e:e7:da:c7:fb:86:96:73:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=4935c7fc-5a3d-4e13-b98a-6967609db8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:42:cc:71:83:c4:3a:9c:3a:40:7e:ec:86:
                    c9:11:3b:72:3e:ab:fa:fd:b1:17:dd:73:fa:7b:71:
                    df:d5:46:ca:c3:0a:cb:d1:f8:11:6b:8b:d6:cf:98:
                    91:85:63:fa:e4:13:5b:40:a5:f6:5d:8d:e0:cd:ae:
                    14:04:96:87:61:00:a9:4a:15:b4:17:3b:5c:be:a4:
                    b5:f8:64:91:6f:38:83:49:96:38:f9:51:d8:8c:e1:
                    64:07:fa:4a:4d:18:94:e4:86:80:90:7a:68:2c:23:
                    e5:ad:46:d2:d3:a2:7c:58:9e:28:2e:9a:9b:db:86:
                    df:8e:f8:1c:17:6b:07:7f:ec:1b:fd:59:f0:a4:06:
                    57:a3:fc:60:a0:96:77:7b:fa:43:3a:e1:46:7b:83:
                    c9:53:e5:8f:f4:02:8a:36:be:ac:21:32:55:31:9b:
                    da:d0:cf:90:36:53:6a:47:6e:a4:ec:98:75:f5:03:
                    85:82:04:37:ad:a3:06:78:8f:55:ae:9f:bc:02:66:
                    c3:ff:ab:7c:87:1a:94:26:ad:36:ef:27:31:52:ab:
                    02:80:ae:cd:0b:b2:d9:20:8e:38:93:2e:72:b0:34:
                    20:8a:5e:b4:3b:e1:dd:81:97:99:76:ff:84:c1:65:
                    e9:de:a3:48:8b:6e:25:6f:5f:8a:cc:83:d0:ab:08:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4A:A7:66:72:E3:62:AE:47:E3:AF:8F:D8:A6:ED:AB:74:9B:FB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:2e:79:f5:04:22:09:a1:76:7c:67:5c:57:c7:33:8e:8f:
         c5:fc:8d:72:0b:7f:e2:80:51:21:6d:af:fc:8b:a0:00:1a:54:
         77:8e:90:a7:83:9b:0a:f4:f5:87:99:05:f0:5f:68:31:63:b8:
         61:e7:23:c7:a7:22:15:07:23:69:79:bf:f4:be:52:84:80:7a:
         68:f3:b2:33:79:5e:14:ff:01:1a:a9:88:b0:0b:d8:a6:a6:2c:
         9c:91:18:33:96:e0:84:17:89:23:b2:c1:59:29:2d:19:37:67:
         1d:1a:ae:df:31:7a:94:b6:d1:de:f5:c1:cc:7c:ff:22:58:c2:
         37:35:93:62:04:ff:59:c6:14:a5:85:52:b2:6f:e7:4b:21:0c:
         63:91:e7:1c:cf:43:30:00:fc:5c:55:c0:f5:ba:ad:1c:a8:c0:
         fb:0e:22:25:de:59:f4:ee:43:00:d8:5e:a6:ec:e2:01:95:1c:
         54:22:fa:84:04:6c:e2:b1:2a:10:ff:06:e7:05:a6:96:58:25:
         9c:62:34:73:c9:93:86:cf:13:a6:b2:b6:a1:4c:de:a8:27:29:
         96:24:d0:6a:09:3a:74:94:b2:9a:b5:cf:21:89:6c:54:59:3a:
         45:6f:ad:12:6c:2d:af:61:df:c0:e0:fa:ee:d8:c9:5f:70:02:
         b4:9c:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:49 2025 by rpki-client