Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
File:                     27872a34-19cb-38ff-9f2b-60c884e32b1a.roa (raw, json)
Hash identifier:          mUaxUXztiSQi783o4hs4ucJN8ljdqzJicqkb//+z6vk=
Subject key identifier:   E9:3F:5B:F6:42:85:DA:44:5F:8E:11:D0:3F:82:1E:89:0B:9B:08:FB
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584AD9365A7389CB0453B1E53100
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     400544
IP address blocks:        2607:76c0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5a:73:89:cb:04:53:b1:e5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=e0dea7c1-dd96-4c89-bf40-3a69263fe4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:e2:c2:e1:20:76:53:75:36:f8:a7:48:d1:
                    de:3a:ad:56:d9:2b:bf:16:73:7e:ce:8a:29:9f:ab:
                    04:01:07:e3:80:60:06:ef:d1:3e:cc:96:7e:78:46:
                    2b:12:a8:c7:e4:9f:c4:48:1e:80:b6:5f:a3:ae:ea:
                    ae:de:54:75:87:1c:9e:68:04:28:18:39:b6:3e:af:
                    42:9b:e9:20:40:d0:98:7f:c8:d1:9d:a8:51:4b:d9:
                    43:48:d7:fa:4f:1e:a6:f8:39:17:84:d1:52:64:bb:
                    ae:b5:3c:d4:f9:9d:43:0f:c0:1b:df:c1:03:3a:6f:
                    83:9a:64:fb:1e:a5:04:20:93:df:c0:c6:43:85:f5:
                    8e:ac:36:44:88:34:e6:7b:29:54:4e:94:a1:d2:a3:
                    7f:08:0e:29:db:50:ce:0d:f4:17:2a:be:62:23:c7:
                    d0:e7:82:0a:e4:26:ef:47:fd:d1:ad:84:e4:13:af:
                    7c:af:5b:19:08:f7:33:c3:82:6a:7d:7d:77:2e:09:
                    7f:65:51:9f:22:92:b0:44:c0:4e:04:9b:7b:67:16:
                    e8:0d:23:f0:3d:2c:a3:c1:83:f8:e2:a2:4c:e4:b6:
                    e9:8d:ea:02:a3:8d:e1:d8:59:7e:a8:43:6c:b7:b7:
                    fd:49:d1:d4:33:ed:1f:c3:28:7d:4b:97:fa:74:99:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:5B:F6:42:85:DA:44:5F:8E:11:D0:3F:82:1E:89:0B:9B:08:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:8e:e4:4d:71:9c:e8:0a:f2:ab:ed:60:27:83:42:f2:63:
         98:93:11:17:d3:b4:07:f5:0d:7a:d8:b6:2c:7d:be:02:d6:17:
         47:44:a5:9e:62:1f:37:c2:3d:b8:d4:27:97:ee:94:2e:3f:f5:
         00:a7:e4:e5:e0:26:10:b9:bc:ab:6a:b0:d4:c9:5d:30:16:1d:
         bb:54:32:29:db:ba:4c:b7:cb:41:6b:4d:e7:26:28:e4:09:32:
         4e:56:7b:4f:4c:0d:90:d3:9b:31:bf:d2:3a:b3:81:d8:47:06:
         c1:07:41:a9:01:ca:fb:80:5e:91:4f:b2:7f:6a:0d:e4:a5:43:
         c7:44:b4:1d:02:0f:21:bc:b5:da:01:6a:14:a2:bd:b6:f0:67:
         17:d7:aa:f0:52:57:2a:37:7c:de:8c:28:0d:3d:9f:50:62:b9:
         a2:59:8f:ee:06:4a:80:57:2b:ed:3e:a2:e3:04:a5:7f:77:32:
         aa:c2:0c:d4:e9:44:4f:5d:1c:0e:18:07:63:c2:e7:96:95:c8:
         82:b5:6d:1d:01:7d:de:10:cf:fa:7d:30:d6:55:f0:59:ef:e4:
         11:f1:d7:94:01:b9:c2:b9:75:0d:85:96:a9:3f:12:0d:de:2d:
         20:bd:46:37:9b:14:b5:a3:16:14:aa:9c:e0:21:10:49:6c:87:
         ff:c4:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:02 2025 by rpki-client