Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
File:                     7f8d135c-0a0a-351d-8578-25795052890a.roa (raw, json)
Hash identifier:          xfs88xWr5EIV0XKPdO+g9/mh4WK+6vBT60ibZCBxl2E=
Subject key identifier:   B1:A7:02:CC:E8:12:F6:4C:41:EE:0C:A0:C7:3D:34:43:12:F4:27:B5
Certificate issuer:       /CN=6088917c-c2eb-4059-97d2-b06df418ce7e
Certificate serial:       010D0C9F4328584A5CFB2EB22E469B493DBA4680
Authority key identifier: 23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     53358
IP address blocks:        2607:cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2e:b2:2e:46:9b:49:3d:ba:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6088917c-c2eb-4059-97d2-b06df418ce7e
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f8d6250c-f3c5-49af-91a6-bc1298241fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:6d:d1:9c:8d:96:de:d9:6a:a9:21:cb:12:
                    84:3e:29:45:fe:81:f7:ca:59:4f:7b:9b:29:53:a6:
                    a8:1b:b0:54:7b:71:55:84:8a:33:bc:a7:c6:db:b8:
                    70:cc:94:60:cc:8c:d7:b6:17:5b:47:6f:8f:75:6d:
                    26:20:95:9b:ff:a3:be:ae:f0:49:52:34:98:95:97:
                    71:33:38:77:9f:b7:15:8d:6e:3d:48:2e:bc:fa:f4:
                    9e:07:c7:6b:85:3b:1d:18:95:f5:ff:24:cd:dd:a8:
                    6f:ef:8b:85:b1:c4:06:32:67:b5:1c:78:4b:07:48:
                    07:a6:5f:cc:70:47:b7:53:a3:0a:8d:0f:70:73:67:
                    31:d3:bb:dc:de:c4:1c:4b:b7:be:30:fd:4d:92:fe:
                    0b:3b:0d:d4:29:04:b1:c7:ae:26:d8:b8:38:03:86:
                    89:02:d3:44:33:1e:f3:42:0a:47:91:0a:42:8c:37:
                    3e:1f:42:77:45:ce:c7:f2:b4:f1:15:bd:78:2a:b7:
                    3a:1b:b1:7f:9b:f8:04:dd:37:35:43:56:b0:20:58:
                    d6:a1:46:6d:f1:9e:2e:b2:1d:5b:3f:24:c5:71:09:
                    eb:3e:e8:78:46:05:3e:f8:ed:94:fd:15:59:9d:e9:
                    b5:9e:eb:d4:15:2a:e3:1f:21:be:de:ba:4d:02:49:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:02:CC:E8:12:F6:4C:41:EE:0C:A0:C7:3D:34:43:12:F4:27:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl

            X509v3 Authority Key Identifier:
                keyid:23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:f2:fe:df:74:91:fc:a6:da:28:95:dd:b7:00:a8:a4:76:e6:
         74:64:69:e1:73:ac:19:ae:57:42:26:86:99:43:bc:fa:2f:b9:
         8f:5a:a2:f0:ff:b2:d8:e1:7a:f1:06:c5:0d:f5:9f:96:d3:b3:
         37:1a:d8:03:7c:e0:b8:18:a1:c5:61:66:52:24:d3:ae:c0:ab:
         39:4e:9a:35:53:dc:ef:e3:73:8d:60:b2:4a:ac:5f:12:e4:88:
         71:a8:e9:0f:37:61:9d:63:61:71:62:99:a4:2a:8a:f3:d4:60:
         59:34:01:29:d1:6f:ba:76:0c:15:d5:6c:1d:71:cc:0e:e5:d2:
         58:b1:d3:2c:da:05:e6:03:e6:d4:b4:77:ea:6c:b0:b8:c9:ce:
         3d:73:af:68:5e:ed:d4:d9:bc:05:d2:b3:54:a2:6f:01:3e:e6:
         67:2a:51:40:c0:54:db:7e:fd:45:50:29:43:b4:e5:46:eb:4b:
         be:88:14:2c:d6:52:a3:56:1f:16:12:e7:87:ea:e0:6d:10:d8:
         f9:20:29:37:e3:08:84:6d:5f:4c:1a:97:89:c8:6d:dc:a7:5d:
         ad:8b:63:a9:1a:48:16:a1:e2:f9:e5:7d:5b:3c:e0:f9:f1:66:
         f0:99:6f:8e:5c:33:50:e2:7d:41:d3:0f:6f:03:63:86:73:57:
         e2:3f:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:09 2025 by rpki-client