Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
File:                     0fc501a8-9b51-3494-80e1-b539914bd3c7.roa (raw, json)
Hash identifier:          MQt7B8/sN3A74SZcLrICjqRVw2OSu21x+7Q8qekhmBc=
Subject key identifier:   36:B8:29:15:EC:5F:87:86:AF:FA:4F:E0:74:27:4A:B2:26:F3:02:32
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584A3CE020A19DFF6DD58E04CB00
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     26383
IP address blocks:        2605:e440:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:20:a1:9d:ff:6d:d5:8e:04:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=cc631f73-8516-4569-8cdd-297192af875f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:c0:af:71:02:c8:86:89:f3:bc:91:3a:9d:
                    71:9c:6e:f6:93:7e:9f:f1:54:0f:fd:b2:77:3a:66:
                    99:32:b6:4d:c2:ba:c7:c2:7b:79:80:37:fc:f4:f3:
                    a6:95:7b:71:12:00:a2:56:28:9a:f2:3f:49:2a:88:
                    8c:b2:b2:6e:b6:4a:78:79:96:53:c5:08:31:d0:4c:
                    e7:d6:4d:b6:b7:a9:d9:1d:a7:86:42:86:44:b1:14:
                    5f:af:fc:57:23:ce:c1:2d:95:de:50:aa:7e:8f:37:
                    45:36:20:81:db:dd:7f:0f:92:f1:f7:ef:39:2a:92:
                    b2:45:d8:93:a1:a1:b5:f3:c6:9d:37:04:63:f7:fd:
                    15:69:b8:8d:6c:e6:6d:48:6d:da:5e:d4:50:12:b6:
                    a1:77:d2:79:62:89:21:fd:07:3d:19:0f:e5:4b:14:
                    bf:fd:d5:57:be:91:66:a3:3a:de:2d:d2:31:fb:53:
                    f7:44:0c:10:53:6b:63:ab:c5:ea:4d:ed:b1:f9:75:
                    07:c5:94:07:f7:55:57:24:16:cf:d8:82:46:75:e4:
                    b2:81:8a:5d:08:5c:e8:f3:bc:58:ff:b1:09:3f:aa:
                    46:80:be:27:e5:4e:a3:65:59:b4:86:61:b6:46:1c:
                    54:87:cb:00:4f:39:f8:f2:a0:9e:3f:33:ea:79:d6:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B8:29:15:EC:5F:87:86:AF:FA:4F:E0:74:27:4A:B2:26:F3:02:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:19:dc:60:85:44:3b:01:79:e1:fa:f6:79:74:78:a4:70:22:
         ae:9b:97:97:ca:5d:f4:8a:15:d8:f0:b9:c8:1a:5b:01:bc:af:
         0e:72:73:65:eb:2f:65:7f:6e:25:e0:a3:68:cb:66:7b:cb:18:
         63:2d:93:e8:1c:65:b0:1d:70:38:c1:ad:50:16:63:98:23:32:
         3f:34:7c:aa:33:b2:35:8d:c5:75:7e:64:fd:ef:a4:34:34:57:
         a7:0c:d1:a6:fe:5c:e5:f7:6d:01:20:e4:c9:8f:2b:14:ca:3a:
         06:4c:6a:b8:3f:62:72:4e:db:fd:57:48:85:c8:0b:ac:f3:04:
         27:f2:da:26:26:ec:c6:22:89:3a:4c:23:e1:e3:5c:1d:d3:1d:
         fe:30:93:53:cf:1f:9b:15:eb:97:01:96:52:7a:8c:77:55:46:
         f5:1d:95:83:78:7e:e9:16:ec:34:9f:18:fb:5c:4e:3b:f6:33:
         50:73:eb:db:87:71:a6:9f:05:0f:92:45:16:b5:1e:48:d1:ce:
         1d:92:46:13:e6:c4:f4:bf:0d:92:16:7f:b7:f3:6e:d6:db:ac:
         fd:ab:33:af:35:cd:0f:11:1e:1c:b5:31:a2:50:31:89:17:af:
         0a:26:b2:3d:26:18:df:7c:e5:2e:d6:81:ee:e3:23:d7:04:69:
         64:c3:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:25:22 2025 by rpki-client