Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
File:                     9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa (raw, json)
Hash identifier:          D65U+1bB6VlHQw1s5yY5RyUvwZP+hrZFWa9ToL2sOlQ=
Subject key identifier:   2B:DD:BC:2F:26:6E:F6:DA:C0:44:93:0C:52:63:32:AF:7A:B0:24:08
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584A43DB07DB972973AA85E8BB80
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     25664
IP address blocks:        2607:cc80:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:07:db:97:29:73:aa:85:e8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2c2f8da2-72cc-46b2-a078-2f7a34aafada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:d9:6b:74:6c:5f:be:c3:7c:0c:ac:63:a5:
                    96:8e:8a:77:53:41:aa:f1:0d:47:ea:c8:50:2b:45:
                    e1:de:02:da:08:dc:90:56:93:6c:ef:07:6a:38:4b:
                    c4:00:1a:99:71:55:3a:cf:21:8f:ca:f8:83:a9:d9:
                    83:8e:50:ee:19:71:0d:ab:be:b9:0f:36:7c:24:80:
                    49:34:c9:45:6f:d8:36:12:36:30:f7:6b:22:91:22:
                    42:90:5f:d6:2e:30:25:ad:4b:10:be:6a:d0:95:08:
                    2b:a7:ce:5e:0e:86:8e:16:82:98:f6:ec:da:f4:e9:
                    55:4a:12:20:2d:77:00:22:19:fa:12:c1:d0:74:1a:
                    cc:1c:7e:fe:4e:a4:58:58:e9:77:21:e2:ee:20:c6:
                    29:f9:22:e5:a2:1c:51:81:26:e0:b1:63:b6:d8:3f:
                    28:67:c7:9b:a2:d2:1c:27:63:6e:d1:07:bb:c6:41:
                    93:9a:28:1a:de:72:1f:3f:39:bb:da:3a:70:13:03:
                    e3:d4:d6:80:4d:11:6d:14:6a:e7:e1:97:86:15:6f:
                    8f:e0:c0:d3:dd:56:ce:72:c1:4b:14:00:f6:d8:05:
                    8f:48:ea:ba:fd:5f:c2:05:06:9d:61:3e:44:6b:b1:
                    ff:3c:e0:96:9a:b6:70:6f:3f:d6:b4:11:43:dd:37:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DD:BC:2F:26:6E:F6:DA:C0:44:93:0C:52:63:32:AF:7A:B0:24:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:3f:e8:55:6f:42:5d:34:42:0a:d1:87:9d:69:a7:98:91:
         32:28:f0:b2:76:6b:8f:0a:ae:ff:6a:4e:a6:fc:ac:b2:1c:e4:
         6e:71:d2:16:32:f0:f8:1d:01:c6:85:18:f1:6d:23:64:4f:ff:
         09:7d:bd:c4:bf:eb:94:06:51:72:02:05:0e:52:df:c5:80:7d:
         29:72:1a:dc:84:57:35:9c:52:26:c1:19:d9:ab:33:99:89:d6:
         a4:92:3b:b4:d7:5e:99:79:fa:0e:cc:34:f0:01:78:99:0b:cf:
         37:42:7b:57:61:54:3a:5d:5b:c7:1c:3b:57:10:4e:7d:a4:b0:
         b5:a3:ae:0b:cd:6b:f4:cc:5f:75:b5:30:b1:ef:e3:42:20:c9:
         45:4d:57:68:79:1a:d1:dc:43:fa:df:5a:63:e2:e6:d0:55:28:
         4b:13:65:97:19:20:1d:a4:92:33:ee:d1:b7:ec:2b:29:08:ca:
         db:62:b6:59:10:94:0b:dc:0c:2a:3d:c3:4e:3e:22:da:40:a6:
         cd:aa:ef:b7:b3:7d:31:cd:8f:86:5a:a5:f8:cc:78:f5:d5:b2:
         d9:d6:36:e8:d1:74:56:7d:c2:e7:95:21:fc:8e:b6:5d:2a:c4:
         75:80:28:d4:3b:be:cc:af:b0:59:c6:03:98:b1:24:36:05:f9:
         b3:6a:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:47:57 2025 by rpki-client