Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
File:                     623eee29-c1bb-3ce9-82ac-987b2182c917.roa (raw, json)
Hash identifier:          c4XkFIqsSU3lYlCUggPv4WP+eqfRDWIrkfjRq438z3U=
Subject key identifier:   D8:51:6E:25:E9:96:C2:73:8C:B4:0E:7A:7A:5C:DB:13:A8:1B:E3:7E
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584ACE0B91210539563EB54C62C0
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     46208
IP address blocks:        2607:f5b8::/32 maxlen: 48
                          2607:f5b8::/33 maxlen: 48
                          2607:f5b8:8000::/33 maxlen: 48
                          2607:f5b8:8000::/34 maxlen: 48
                          2607:f5b8:c000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:91:21:05:39:56:3e:b5:4c:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=0031c360-3fb8-4862-8d71-8c0440c691d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:27:d4:c1:03:19:8e:9f:87:ae:f8:6a:c4:
                    5b:24:91:19:d6:f4:35:6a:71:e4:9f:c6:9b:d4:6a:
                    2f:f1:34:59:80:bf:95:5d:19:4d:16:19:1e:f4:94:
                    b5:71:88:f7:69:20:15:98:43:a0:41:f8:8a:9a:bc:
                    45:17:96:2f:d1:d1:10:08:9a:07:de:71:3d:8f:b0:
                    40:ca:e1:b6:f1:75:d7:58:a5:59:3a:37:ea:31:81:
                    bc:58:c1:9d:4e:45:08:54:4d:78:a2:b4:ae:41:e3:
                    1f:56:8c:58:22:26:91:b9:1e:30:59:96:70:6e:9a:
                    ed:a0:d2:c5:ab:fc:5b:42:11:ba:e0:e8:cb:bd:bb:
                    2a:17:2c:ac:a5:1b:bb:d6:7c:3e:88:af:65:e7:11:
                    5a:3a:47:3c:04:a6:bf:fe:89:4d:c2:57:a4:bc:b5:
                    98:f0:29:4a:34:0e:91:4a:f1:19:22:68:47:c9:f0:
                    34:0f:e1:08:21:f6:d4:ec:6f:14:26:a3:82:de:37:
                    09:5c:79:bb:08:df:90:18:ad:1d:10:23:d1:8b:2e:
                    08:a5:60:9a:0c:dc:99:2c:f9:16:fa:7d:3a:72:26:
                    c9:22:55:21:f1:cf:42:d4:4e:b8:fe:b4:77:41:9c:
                    01:63:af:b6:43:92:bd:97:87:70:0e:62:40:36:5b:
                    4a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:6E:25:E9:96:C2:73:8C:B4:0E:7A:7A:5C:DB:13:A8:1B:E3:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:25:11:8d:9b:2f:02:ce:83:46:70:46:89:74:e0:a4:aa:bb:
         d2:c4:83:e2:94:62:3e:10:36:25:44:0e:09:28:ff:92:5c:78:
         50:5d:fd:2a:b1:79:90:1f:de:47:b2:ae:72:89:9b:ac:1f:27:
         3d:67:16:09:28:43:ac:af:b2:ab:02:4c:eb:ef:61:e0:3c:ab:
         2c:80:61:7b:dc:b0:35:e6:f5:65:f6:9a:48:12:7f:36:05:fd:
         93:fa:34:86:3f:2a:b0:11:b4:3b:c6:b5:b4:c8:78:14:11:db:
         d6:4d:38:29:73:3e:26:a1:c3:4b:72:48:52:23:f1:f2:c5:a4:
         db:13:d5:df:ad:11:66:a1:81:c0:a0:f1:b4:32:de:f8:a4:a5:
         54:30:e5:8d:91:5a:6f:09:85:15:f9:56:9c:7c:38:84:b2:68:
         86:9f:c2:43:17:a3:c6:e9:89:71:12:31:e0:0e:17:8c:de:2f:
         a4:2a:e8:c2:3d:36:06:73:64:4d:74:12:12:56:71:36:2b:eb:
         08:0c:7d:3e:1e:60:69:c8:4c:f2:26:c7:59:8a:29:17:10:fb:
         42:e4:82:f6:be:1e:54:85:b8:6a:4b:fe:34:55:a8:01:e3:75:
         6a:aa:19:06:5a:05:07:7b:29:7e:e1:c4:d9:a0:f5:c7:2c:94:
         43:44:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:34 2025 by rpki-client