Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
File:                     69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa (raw, json)
Hash identifier:          bvZWCNVFVf21BljN4MkRmGT1uAwEh7yde7fXVIkST3Q=
Subject key identifier:   1F:44:1F:CD:26:F1:AB:43:B5:AD:93:BD:56:E8:C9:E8:E6:62:A9:DF
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F4328584AC9DB9F7B525FDDB72F561B00
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     7212
IP address blocks:        2607:8a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9f:7b:52:5f:dd:b7:2f:56:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=a45586ee-438c-4909-a856-027ae2ed84ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:c9:dc:70:ae:68:c0:e3:d0:2a:a0:36:0e:
                    36:8f:9b:87:5a:92:bc:a8:de:8d:16:96:69:ca:fa:
                    d3:36:c7:00:98:d1:31:c9:e6:48:1b:6a:9b:83:08:
                    32:d6:43:33:7d:33:30:c3:42:25:d9:f3:8b:81:a9:
                    39:c1:e9:21:7b:7d:9a:b4:c7:86:92:5c:5b:08:59:
                    08:de:80:4d:8a:d8:4f:a6:3d:93:6e:fa:68:a7:a9:
                    20:b9:95:c0:6b:a6:14:52:07:0b:72:df:ed:fe:7d:
                    78:d9:3a:57:c2:ab:e8:25:d1:f4:05:a4:d7:5b:8a:
                    2d:be:4c:a8:52:20:c0:79:cc:86:8f:5f:b4:55:8b:
                    b2:fc:45:58:5f:f2:ff:da:4c:fb:30:8c:e7:c8:be:
                    a6:ac:8d:88:31:f8:99:4e:50:b8:cf:5a:06:91:3a:
                    71:5f:42:38:de:c4:c8:a3:66:89:32:f2:4a:9e:32:
                    d4:6f:b5:81:ce:7c:fc:4a:b6:e8:47:e6:ff:b5:af:
                    31:97:39:64:72:be:f3:a7:a1:48:d2:cc:f2:09:4a:
                    c0:47:c9:54:d4:55:f3:5a:7a:74:0c:e0:5e:ba:b9:
                    10:0e:0c:0c:38:c6:41:ed:4d:ba:99:4f:2f:b8:3b:
                    8e:8f:ca:f6:13:ad:75:0f:59:db:79:d5:97:5c:3d:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:1F:CD:26:F1:AB:43:B5:AD:93:BD:56:E8:C9:E8:E6:62:A9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:89:85:14:de:2e:9b:0e:dd:e2:8c:d0:55:5a:ff:80:44:
         f6:bb:c1:76:22:85:60:86:7b:b2:b5:fe:23:79:f8:f8:44:8c:
         ae:81:c8:9e:be:19:ba:0e:c8:73:71:24:dd:72:f0:27:da:46:
         cc:5d:e1:68:71:08:2e:77:1b:5c:d3:7a:40:56:97:ee:d3:39:
         1e:67:df:35:b6:66:11:e3:f0:6e:94:e6:75:5d:f8:09:0f:00:
         46:62:64:a7:d5:6b:05:45:fb:0d:8c:33:d5:64:d7:f1:cb:e4:
         3d:b4:69:5d:bc:2b:7d:b8:46:a6:26:89:a7:dc:d8:e5:06:52:
         1e:5c:0a:b9:53:ed:b7:4e:2c:23:c5:99:f3:fb:cb:a1:6b:8e:
         29:f3:0f:55:20:dd:b1:cc:74:e8:02:81:66:d4:c0:ba:55:0c:
         9b:7b:dd:ef:a2:38:9a:66:f6:16:73:17:c2:d7:94:a8:c2:b8:
         66:65:93:69:e6:cb:bd:07:99:67:ee:c4:12:69:c0:06:eb:10:
         66:b7:1e:07:ec:a9:26:81:04:ea:4a:e3:e5:9f:76:6a:42:80:
         b1:17:77:1e:9f:ab:4f:99:75:12:9e:2d:c9:32:af:4b:5a:f2:
         88:3a:90:8b:f3:62:96:c5:e2:41:c9:2b:b3:84:a0:b7:51:6e:
         80:5d:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:16:51 2025 by rpki-client