Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa
File:                     da9b985a-da06-318b-9677-1bef9fb560c2.roa (raw, json)
Hash identifier:          xCq4So17e+NlgvSAsKItvgHzLW++DE3Ro/V/MPM3H6Q=
Subject key identifier:   EA:44:99:12:8C:A8:6D:F1:28:98:CD:D0:A7:33:60:52:11:06:05:CC
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584AEF8BCAA51C611A4C1CFACA00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     271
IP address blocks:        2607:f8f0:450::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:ca:a5:1c:61:1a:4c:1c:fa:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=5dc20af4-5be3-489f-8119-0ce4ebf961b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:2e:67:b3:5d:a6:ca:f7:ff:5c:f8:42:ed:
                    99:cc:1e:09:58:3c:0a:28:e5:65:3e:98:00:3d:05:
                    0e:c9:ae:2f:3e:b8:84:95:ba:cf:bd:3e:2e:d1:22:
                    d9:c4:b2:c2:4e:56:f2:15:a4:c5:53:cf:e3:a3:4b:
                    7b:2d:49:0d:e0:a2:ba:2a:e9:1e:a2:f7:98:fb:81:
                    9b:9f:cd:be:62:38:01:21:b2:84:3a:d7:cb:19:2e:
                    f6:a2:52:5a:58:f1:33:66:f3:f9:ec:7d:ef:ba:17:
                    69:aa:09:57:a3:5c:66:07:61:7e:36:f3:eb:18:fb:
                    e9:3a:e9:aa:a0:d5:ae:0f:53:a4:df:0a:29:10:a4:
                    d4:f6:b6:9b:b1:33:b1:6d:45:3b:68:91:b8:b0:3a:
                    22:39:e2:aa:a8:16:32:64:ff:96:12:c1:c3:e8:af:
                    03:f6:a3:ec:0f:32:1a:1a:a1:26:ce:00:c4:9c:d5:
                    df:03:24:96:c0:9b:07:33:8a:d6:7c:7d:7f:6d:3a:
                    7e:a7:58:ab:e5:ff:16:37:a3:6e:6d:48:75:72:1a:
                    48:40:14:ab:5a:b3:c0:88:e1:9f:30:a0:58:d6:e2:
                    af:21:f1:22:80:89:9d:9d:5e:64:2e:23:ae:8d:77:
                    9d:93:35:67:96:65:c8:88:38:1d:f7:99:e9:24:bf:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:44:99:12:8C:A8:6D:F1:28:98:CD:D0:A7:33:60:52:11:06:05:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:450::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:08:cf:59:cb:7b:db:43:77:a6:b8:a2:81:fb:4d:e4:4a:19:
         80:84:81:31:f6:4e:de:4d:de:9e:62:fa:d1:66:d8:8e:ac:0e:
         ee:db:02:f1:7e:b5:1c:0b:44:2f:1d:47:fe:30:81:03:b7:04:
         cc:32:d1:37:77:eb:f1:1c:fc:bd:a2:7d:dd:2f:ed:33:2a:c1:
         64:00:fb:70:f1:03:bb:a0:67:46:ad:1b:f1:65:7f:7f:5f:2c:
         eb:27:d8:bd:fe:4a:d2:5f:da:17:b4:e2:17:5a:68:41:d7:91:
         d9:11:4f:e7:a5:6b:8b:d8:ec:f7:4c:94:bd:9b:1e:71:f5:62:
         ac:9a:0c:59:c2:47:14:d3:1c:44:a3:e5:14:5a:8d:9e:e3:6e:
         2f:83:bf:41:13:c3:99:c7:51:43:06:3f:fa:8e:74:6d:4a:e2:
         26:d6:d1:ab:ce:9d:26:0b:f9:84:35:bd:91:d3:44:ea:00:52:
         51:c0:a4:c7:dd:40:06:ac:79:46:b2:b7:00:d1:b8:30:a6:f3:
         e0:d3:21:6e:11:d0:f2:a8:53:63:23:8c:6a:67:1b:1f:e3:90:
         da:d9:14:0f:01:c4:3f:4b:bb:47:d5:38:1f:d1:9a:7b:31:13:
         4e:2d:4d:63:8e:e5:f1:3f:bb:42:cc:01:0a:1d:c3:a2:ad:89:
         bf:fb:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:26 2025 by rpki-client