Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6f1dcab1-fd10-3b65-9bdc-01fd3aefa5ea.roa
File:                     6f1dcab1-fd10-3b65-9bdc-01fd3aefa5ea.roa (raw, json)
Hash identifier:          uPLgtxY2SWavFkHWxqDWEnjpe9mitfpYP/isgfN3qhE=
Subject key identifier:   1E:B6:B3:1E:A8:87:6A:77:86:42:DD:A7:F6:C5:57:75:C4:66:8B:4C
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B9944DC1BB842C3CD8280
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6f1dcab1-fd10-3b65-9bdc-01fd3aefa5ea.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     12189
IP address blocks:        2607:6000:700::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:99:44:dc:1b:b8:42:c3:cd:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=ba632c50-9d34-4918-bca5-db5b65e08b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:80:30:03:05:3d:75:32:05:27:94:d8:d9:
                    8a:a7:89:e5:65:12:cc:7d:c6:91:e6:e0:4f:ab:f5:
                    03:02:f2:83:81:00:0d:97:76:4a:6c:51:a0:ad:c7:
                    c0:39:7b:9f:e8:84:dd:a9:4d:22:df:4d:b5:fd:e6:
                    78:be:a0:8a:b0:2d:09:07:eb:fb:54:f6:eb:d3:5a:
                    34:1b:2a:41:8e:1e:cc:ce:45:32:3d:c1:8e:ab:e7:
                    6e:14:09:4c:3e:da:2d:c4:d0:b8:9e:f5:1a:65:2b:
                    fe:4f:69:5a:b3:51:f9:cd:6f:d0:8e:64:60:60:8f:
                    e2:39:6c:01:ad:1b:10:3a:8f:8d:95:01:15:c9:2e:
                    19:5a:89:b5:6a:b1:be:31:9d:1d:4f:4d:89:de:3c:
                    96:52:06:98:cc:32:df:86:17:f7:1a:e6:5b:84:e5:
                    b5:88:6f:40:6d:aa:1d:a4:b6:e5:e2:0d:92:be:11:
                    c3:7b:55:34:e9:6a:25:25:27:21:ea:79:99:aa:14:
                    1d:f0:7e:eb:83:1f:88:cf:33:92:f5:44:33:ff:5a:
                    e0:da:eb:58:6c:23:80:c2:14:62:ae:ac:80:79:97:
                    f6:de:ee:47:2a:91:15:68:05:29:0a:1e:02:dc:3a:
                    cf:43:e5:34:b9:66:e3:59:2b:6c:55:09:a2:f4:f5:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:B3:1E:A8:87:6A:77:86:42:DD:A7:F6:C5:57:75:C4:66:8B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6f1dcab1-fd10-3b65-9bdc-01fd3aefa5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:e4:43:14:2e:20:f6:cc:d4:ad:37:ca:00:fc:cd:c4:6e:
         4a:88:10:3e:b4:c8:f7:0c:fd:e0:e4:ba:53:d1:83:33:60:1b:
         4d:06:8a:ed:69:87:d0:40:16:e0:74:09:d8:0a:35:dd:20:20:
         22:02:d2:61:d7:77:cd:87:42:97:c9:34:80:58:5c:bc:a3:2b:
         f3:ba:c9:dc:5b:2b:89:e2:47:cf:7e:67:b9:29:5e:fd:11:d8:
         89:6b:ba:da:4f:c9:6f:ad:5a:93:1b:66:c1:3c:5c:ee:5d:cf:
         9e:4d:bf:23:d5:32:44:f6:c0:84:49:6c:5d:76:7d:c1:ec:fe:
         33:8a:c8:c0:9a:42:fa:26:e4:1d:df:7f:dd:f1:b6:7d:c6:9a:
         a5:cf:42:90:65:f5:98:8e:4b:e6:69:13:95:d1:fb:3f:77:a4:
         94:e4:3e:8e:c7:15:fa:a7:e7:8f:6b:0d:e8:19:22:5d:9f:2c:
         f5:9b:e1:59:b6:c5:c3:50:53:98:38:2e:3f:f9:46:80:1b:09:
         46:2a:84:0f:ab:4d:ef:d8:3d:65:bf:dd:0d:eb:dc:e2:83:fd:
         f5:dc:2c:c7:11:06:57:89:37:08:12:ac:a8:2b:18:0a:3e:9a:
         8b:ae:27:a2:08:59:3b:75:60:e1:d4:1b:65:f9:3a:6b:47:b8:
         b4:7e:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:11 2025 by rpki-client