Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa
File:                     c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa (raw, json)
Hash identifier:          DDJvM0999MdRrhQ+OwyW7buJ0EgKvcFk6lXsNyvU4dc=
Subject key identifier:   AD:2B:96:2A:C3:83:88:5D:AF:BB:DA:5D:4C:C3:22:55:FF:D1:37:88
Certificate issuer:       /CN=e6548981-a90b-40b3-ae72-e6f32d1b56df
Certificate serial:       010D0C9F4328584AC2E0EEDEA8067392B47AA380
Authority key identifier: F7:90:76:F0:B6:06:4C:4E:EF:EC:2B:99:79:C4:4F:10:DC:44:EA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        2607:b980::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ee:de:a8:06:73:92:b4:7a:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6548981-a90b-40b3-ae72-e6f32d1b56df
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=690b088a-aab7-4d4c-8a7f-7659b2ece06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:73:c1:27:60:a9:1e:ec:e0:fe:a5:4b:eb:
                    0c:a5:30:f5:a1:dc:d1:2c:ff:61:fd:69:06:5d:82:
                    9c:24:b2:37:bc:aa:5c:d3:29:64:c1:62:a2:d0:d7:
                    6e:91:e6:ac:03:97:21:25:0f:99:43:10:07:a1:b3:
                    ed:57:57:e3:f3:bf:1b:03:20:2d:2e:9d:e1:dc:e1:
                    b6:6b:9a:4e:de:37:df:01:36:31:61:42:52:6f:d4:
                    b2:89:24:09:cf:78:9a:c6:1e:7d:f4:fd:36:bc:30:
                    f6:ec:dd:27:6f:a4:68:79:14:d4:ab:39:bb:26:16:
                    62:1e:b5:27:de:c2:b4:41:ef:dc:11:a5:bf:64:e9:
                    0a:1e:35:21:7f:a3:db:22:22:a8:75:6e:78:14:6e:
                    c3:2a:00:c1:39:ac:0c:15:bf:63:8f:d4:b1:8b:7b:
                    85:3c:a0:ec:bd:aa:1a:4f:24:5f:ab:80:84:3d:de:
                    7b:96:b0:26:0a:6e:8c:8e:2d:d8:80:ee:27:8a:11:
                    01:d4:69:c4:eb:5b:70:87:a5:df:3c:77:33:b3:b8:
                    56:5e:6b:b1:3d:9c:e4:51:e3:1e:34:0d:23:a6:49:
                    90:b4:5c:9f:b3:35:36:78:fe:bd:f8:a8:2b:ff:12:
                    5b:a6:6b:23:9d:26:fe:91:f7:e0:27:8f:06:07:96:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2B:96:2A:C3:83:88:5D:AF:BB:DA:5D:4C:C3:22:55:FF:D1:37:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.crl

            X509v3 Authority Key Identifier:
                keyid:F7:90:76:F0:B6:06:4C:4E:EF:EC:2B:99:79:C4:4F:10:DC:44:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:b9:85:27:a7:ba:0b:a7:81:15:7e:14:8b:06:9b:c1:c4:41:
         e1:38:5b:98:ae:25:96:16:6d:e0:56:ac:9d:9c:ea:e8:ff:67:
         45:0c:c1:d3:96:e4:13:4b:ca:22:0a:e6:a7:0f:1c:ef:81:e9:
         6f:00:bc:2b:5b:a1:bc:b0:5f:d6:52:0b:bf:92:d4:34:fa:e2:
         98:8d:2f:21:73:81:dc:4f:64:31:b5:c5:bd:3b:2e:92:ca:f8:
         2d:b9:c3:1e:c7:d7:dc:93:73:38:8e:0d:c3:31:81:55:d6:49:
         ca:88:1d:c5:14:2e:0c:84:e2:cf:cf:ef:fc:03:31:c3:a1:6a:
         95:7a:0a:42:20:4a:4e:c0:ac:9a:d0:1c:61:c6:29:a0:31:61:
         a5:4b:d9:8d:4b:35:2a:23:a9:99:61:d3:14:e8:56:ca:b1:37:
         c4:5c:a8:13:67:19:12:1f:c0:51:2c:b3:90:77:eb:22:e7:c8:
         76:76:32:fe:55:4a:69:07:af:f8:f9:1f:34:52:ae:e5:2f:7c:
         76:ac:ba:38:15:33:cb:08:e1:b9:74:4c:31:bd:5f:cf:75:81:
         82:31:02:e7:ec:a6:a0:d2:98:6c:69:5b:55:a9:cc:81:33:f6:
         18:cf:36:55:26:52:11:07:af:b2:d4:87:c8:85:bc:1d:1d:24:
         ec:bf:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:28:38 2025 by rpki-client