Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
File:                     c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json)
Hash identifier:          j/uTm5OLD6+iSPB7EAxYjiZm/CXKahGWZ1ev8etLZC4=
Subject key identifier:   D1:7C:1F:8A:C4:24:97:2C:23:19:51:27:2D:07:6F:D7:DF:D2:69:2C
Certificate issuer:       /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial:       010D0C9F4328584ADECBBE502055185D781FEAC0
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     981
IP address blocks:        2605:ac40:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:be:50:20:55:18:5d:78:1f:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=98843f08-c58e-46d5-943d-ad5b711e96ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:52:d0:2e:1f:aa:90:df:ba:da:54:4f:cb:8b:
                    35:c5:d0:95:33:58:9d:ea:09:36:95:97:42:c9:59:
                    b6:2f:37:53:93:df:1e:72:8b:82:b1:fa:46:ff:30:
                    ca:9c:34:b7:66:2e:f3:50:6f:fc:a2:e9:51:2a:9f:
                    82:c9:83:ce:26:b5:97:b9:94:72:86:e2:b6:d9:2d:
                    ae:29:e2:1b:f5:14:49:e5:b3:9a:0e:76:f6:ea:d9:
                    87:2b:86:b2:c2:88:0d:14:90:61:83:bd:16:9c:be:
                    00:32:81:89:aa:05:f1:e7:ee:50:3f:8e:f8:47:26:
                    fa:95:99:c9:ae:0e:00:1d:81:61:63:35:e7:7a:9e:
                    e1:db:8b:d2:aa:d6:9c:8c:5b:b7:d5:42:45:6b:28:
                    db:e3:a9:66:32:61:5d:e8:75:f0:a4:18:e6:27:47:
                    60:58:2f:57:03:7a:3a:7b:aa:54:9c:f2:6b:94:76:
                    43:13:1c:3f:d1:f7:e0:e7:71:9f:e7:39:3f:43:d3:
                    b8:53:a1:f1:26:26:0d:c6:7a:53:dc:c2:ba:82:a7:
                    be:cf:47:89:e1:41:d1:6c:65:e3:a7:c6:ea:07:9e:
                    67:47:90:a6:33:e7:91:11:a3:ee:81:c1:e5:c3:12:
                    42:44:bd:7d:93:c2:19:2c:1f:26:5a:fb:5c:6f:30:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:1F:8A:C4:24:97:2C:23:19:51:27:2D:07:6F:D7:DF:D2:69:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl

            X509v3 Authority Key Identifier:
                keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ac40:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:ed:49:cd:a1:ed:f6:9d:15:f7:69:c4:b6:22:c8:c9:e0:
         b6:ed:d4:a8:8b:a6:d3:a2:f3:96:0f:f6:55:36:a5:2e:f1:38:
         51:68:ba:44:60:6a:d7:67:6e:8d:a2:a2:83:4c:26:05:df:96:
         9d:54:83:1f:03:15:f6:7f:b7:9e:41:23:11:23:95:ff:aa:29:
         df:ff:1a:ea:9c:7c:9c:fd:44:99:c1:dc:0d:9d:0b:33:d3:3a:
         4d:0f:45:2d:68:b9:93:50:fd:5f:fb:60:1e:af:e7:ca:50:b4:
         1a:34:c0:e5:1e:50:e0:88:4b:3d:7f:b3:25:1c:ce:98:37:ae:
         93:91:53:e6:3b:66:a3:37:bd:fe:cd:24:9c:c0:99:7f:9d:bc:
         62:be:c7:4b:04:9c:db:60:14:53:57:34:81:f1:fa:4c:70:03:
         21:ce:42:14:4e:e9:bf:c1:99:d1:ff:fe:b8:41:6e:6c:ed:d5:
         5c:18:3f:05:66:ec:b5:47:47:63:ad:cd:dc:34:30:ee:20:a3:
         41:3e:2f:00:12:9e:95:b4:00:a6:1b:d1:88:3e:da:dd:ea:74:
         1c:28:cb:aa:75:6d:7a:d0:66:54:8d:58:46:24:58:5c:9d:af:
         ed:c6:ef:81:07:51:42:dc:c9:6c:85:d8:6e:26:c2:f7:37:b8:
         1d:a9:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:51:02 2025 by rpki-client