Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa
File:                     a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa (raw, json)
Hash identifier:          LZ6SXdzbiTcUl39SoXd/WdVsY0TT90A3Ij0392QOs2k=
Subject key identifier:   98:91:81:34:54:CC:94:68:4B:B8:B4:08:C9:BE:8D:3B:92:68:AC:A3
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584A51D0768FE8198DB19C3BE200
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     396865
IP address blocks:        2605:72c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:76:8f:e8:19:8d:b1:9c:3b:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=e7587c58-e888-477c-a9b0-df2e18d7d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:0b:95:85:5c:2c:53:30:1f:8f:39:0c:21:
                    0f:45:b1:eb:ce:4a:6b:49:99:cb:e4:c7:3f:6a:f9:
                    2a:6b:1f:a6:1c:82:41:9c:a9:d3:fe:cf:90:47:5a:
                    16:dd:17:c6:f6:25:9f:db:71:14:30:8d:6b:7a:25:
                    d9:4b:68:09:23:d7:f0:5e:aa:e1:57:b6:55:0d:f7:
                    ee:90:50:b6:56:28:5b:01:7f:7a:65:7a:06:fd:11:
                    10:31:78:32:9c:6e:02:9c:a8:02:3e:36:11:85:8c:
                    e7:1f:b5:a5:9f:a9:cd:0e:a0:64:25:e7:94:a4:26:
                    84:b8:6a:54:05:53:b1:99:bb:de:17:a5:dc:92:66:
                    36:e7:15:a2:ca:2c:f9:41:67:4d:ba:0c:b7:8b:ca:
                    f4:81:10:9c:a4:39:58:c3:e4:9a:21:c6:85:fb:4c:
                    87:e2:11:e6:ef:7c:bb:41:29:f2:1c:73:86:57:a3:
                    a6:48:eb:42:13:6f:a1:e3:bb:28:af:0d:9c:18:94:
                    5f:2a:4d:cb:13:2b:41:92:07:7d:5a:8d:bf:4c:74:
                    0a:60:ad:fd:77:f0:e2:f2:62:a9:c2:48:48:e7:b8:
                    83:88:54:60:69:f1:03:e9:4e:2e:00:57:bd:b4:c4:
                    61:07:5c:3c:14:35:a5:6c:ed:81:20:87:d3:cf:6f:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:81:34:54:CC:94:68:4B:B8:B4:08:C9:BE:8D:3B:92:68:AC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:72c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:69:96:c1:7e:df:fb:1f:9f:81:bd:8e:54:4f:10:3e:e3:
         87:af:d3:d1:de:f1:d0:21:71:92:9f:b4:e8:0a:6a:e8:4a:48:
         cc:a9:52:e1:62:2c:0e:d3:6e:49:5a:ec:08:3c:73:07:7d:8e:
         a7:b8:54:87:f4:b7:9e:dd:ae:ec:06:5c:51:cb:bd:f4:90:b2:
         a8:c0:30:da:8d:64:4b:a0:1f:66:90:01:44:c1:9c:63:6a:4e:
         93:ec:db:09:cf:d5:2f:b3:8f:21:bf:1e:fc:ad:ff:2d:5c:89:
         44:fd:b9:cd:6a:5d:66:61:36:4a:34:f1:10:46:63:d3:05:21:
         d2:38:de:61:d4:6a:68:6d:cb:f6:79:77:63:78:00:14:58:e7:
         c5:fd:46:77:9a:4d:97:40:76:dc:a1:6f:3d:49:90:dc:12:ab:
         c8:70:ee:27:6d:3a:2e:a0:1c:fe:8a:95:3a:99:98:1d:05:74:
         b5:09:f9:b7:91:5a:8a:79:95:03:db:5d:2c:a2:25:be:5e:66:
         ab:21:77:82:3e:f6:94:de:88:62:49:c2:b2:34:40:9a:c0:21:
         35:fd:bd:10:b5:40:36:c9:da:06:67:f8:3a:09:3a:fe:09:57:
         96:25:7c:af:49:9b:c8:aa:cc:93:e8:f4:56:91:12:c9:c6:32:
         1d:49:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:35:34 2025 by rpki-client