Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa
File:                     0678a963-b458-33a1-a330-e012e17d07c8.roa (raw, json)
Hash identifier:          ewTRRh22wAp0y84IRA1uzNBVRHQIrmeljomVUOuqfFI=
Subject key identifier:   51:09:BC:D8:B9:CF:79:8C:A5:E9:F9:52:22:10:87:A8:98:5B:80:5B
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584A5335A2DA0E96E993EC82F9C0
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     2152
IP address blocks:        2607:cc80:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a2:da:0e:96:e9:93:ec:82:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=34a855cf-59a4-4be5-8e66-ea919c707671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:10:c3:a7:b4:39:6d:fb:bd:ef:51:4d:00:
                    2f:61:cc:d0:85:40:d7:0c:a5:0d:b8:c1:ac:60:15:
                    fd:4c:ea:a1:24:b5:3d:9f:17:c0:73:6a:61:6c:48:
                    49:4e:bc:5a:de:68:68:79:33:a4:5d:fa:0c:ec:97:
                    f1:38:67:d9:6c:8d:dc:1e:6e:44:e4:1e:5f:9b:36:
                    12:88:48:56:25:db:13:59:f7:73:fe:6e:f4:e7:2d:
                    fe:86:2c:0e:32:fc:bc:06:85:e7:2f:ee:91:90:58:
                    42:50:f2:f1:73:4e:83:cd:51:bf:07:ca:0e:d3:c2:
                    53:5a:97:d1:52:a1:4d:a3:9d:55:bd:0b:7b:5c:31:
                    64:a2:c2:b7:de:b9:95:14:e7:e5:a3:e3:30:fb:9e:
                    47:96:a7:8e:63:82:95:75:0b:0c:36:30:14:76:65:
                    ec:d5:1a:3b:1c:b6:cc:c9:1e:fe:ee:85:76:6b:f8:
                    0b:90:6a:e0:e5:06:f6:af:68:5a:04:b1:bc:d3:b6:
                    22:36:d7:e3:94:24:4c:34:46:25:6c:99:5d:6a:a6:
                    2e:ce:5d:bb:2e:1b:00:b6:aa:01:0f:b8:0e:21:a2:
                    64:f5:33:30:94:89:3f:b6:bd:56:3b:c9:df:35:d1:
                    76:b4:d9:c8:6a:06:58:3a:fd:64:2e:0c:ec:52:21:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:BC:D8:B9:CF:79:8C:A5:E9:F9:52:22:10:87:A8:98:5B:80:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0678a963-b458-33a1-a330-e012e17d07c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:81:54:24:6c:25:a1:a9:c4:79:af:5c:ff:22:8b:3b:c5:d9:
         0b:93:3b:8d:4f:b7:9d:1a:25:91:9a:77:e7:82:32:57:6c:06:
         0d:45:a4:79:bd:6d:b0:59:8d:cb:9d:8b:61:5c:f7:3d:8d:2a:
         80:7a:c1:bc:4a:24:44:0f:d8:3e:7e:85:a2:71:20:ca:70:5a:
         af:48:65:98:6c:18:eb:0a:ef:22:b3:ef:6d:15:3e:ef:20:f9:
         ea:24:d4:af:48:8c:da:33:a2:5a:86:ab:c9:50:9b:b2:91:10:
         d5:c5:af:02:29:36:50:71:61:0a:a1:5f:00:2a:96:87:a4:6c:
         36:fd:c5:26:85:5a:65:a6:45:9e:fe:6e:6c:67:d3:60:98:83:
         c3:1f:97:fe:6e:25:d3:5a:25:39:15:a8:bb:ae:90:7f:cd:f5:
         5b:00:79:ec:aa:a1:4e:03:51:29:b2:80:0e:63:8c:9d:5b:fa:
         8d:6b:5b:fe:a1:b5:7d:2d:6f:e8:fa:0a:03:39:14:01:e0:e5:
         e2:2d:95:c0:83:d0:1c:38:63:9c:49:84:50:c7:60:20:32:a8:
         2e:dc:93:59:67:a7:32:d0:78:eb:05:ec:59:cf:d8:22:13:73:
         d8:79:6b:e5:bd:3f:26:fd:60:88:c0:02:ed:7a:94:d4:79:14:
         dd:0f:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:39:21 2025 by rpki-client