Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa
File:                     a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa (raw, json)
Hash identifier:          hyCI4YU4Ud3O5fd9tQ1WUTlALw8rdmnLKmattmlbLbc=
Subject key identifier:   20:54:BB:7E:9C:87:67:1A:DC:C5:ED:BA:01:A8:51:8C:53:D4:B5:6D
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584A4F3C90C7B22247F769CDEB40
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa
Signing time:             Wed 25 Jun 2025 14:51:39 +0000
ROA not before:           Wed 25 Jun 2025 14:51:39 +0000
ROA not after:            Tue 23 Sep 2025 14:51:39 +0000
asID:                     46293
IP address blocks:        2604:1840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:3c:90:c7:b2:22:47:f7:69:cd:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Jun 25 14:51:39 2025 GMT
            Not After : Sep 23 14:51:39 2025 GMT
        Subject: CN=7ab0aaa0-8501-4c5c-8477-4add05b7986e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:56:73:6f:4b:e6:69:10:73:55:43:f2:f4:
                    e6:5d:06:ee:47:2f:db:f0:85:3e:7f:b5:ad:dd:80:
                    2e:87:5b:4f:8e:2e:6a:ad:ac:fb:67:eb:b2:bf:87:
                    da:6b:20:5a:e6:ea:71:72:25:17:62:63:8e:52:63:
                    00:10:a8:40:98:c0:79:5c:81:13:62:a8:cc:43:38:
                    e0:af:93:d5:75:af:24:d1:a2:3d:a5:17:3d:dd:ea:
                    d6:53:5d:95:39:47:78:c9:57:21:fb:6c:fa:e0:86:
                    c9:16:83:d0:57:30:9d:cb:fe:1b:35:b6:cc:b0:6c:
                    47:46:c3:2b:93:48:b7:ee:17:fb:3e:27:de:68:08:
                    6a:51:9c:f2:23:c2:3c:e8:2e:52:cb:7f:16:20:0b:
                    c2:c6:5e:a1:40:37:d0:ac:3f:f2:26:15:08:dd:0d:
                    c3:e1:d3:80:d6:58:88:50:82:ec:f5:f2:01:01:16:
                    b6:f8:d7:ff:5b:8f:5e:6b:b1:5a:36:e2:1e:df:d9:
                    a3:a6:b0:6e:d2:00:29:7f:97:e7:27:3a:05:ed:13:
                    62:9f:30:5f:c8:a9:c2:bf:e9:71:24:8e:d7:7e:b9:
                    0e:e9:78:70:6d:52:40:43:8f:ce:e2:32:cd:15:ee:
                    d7:26:34:6b:cf:17:75:bb:7c:8f:23:ef:99:26:c8:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:BB:7E:9C:87:67:1A:DC:C5:ED:BA:01:A8:51:8C:53:D4:B5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a7c4b3e6-bd0a-30b6-96c2-94dad78ccb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:47:03:28:1d:b3:b4:53:5d:3a:69:9e:9c:e6:45:23:1a:1e:
         e3:2a:a8:e0:dd:ef:6e:aa:40:2b:0e:15:37:62:da:20:d7:d5:
         fd:0c:28:f3:b6:0a:7e:be:dc:64:4d:84:23:c3:9f:81:8e:45:
         e0:9c:10:20:2b:1d:d6:f4:cc:33:94:dd:c0:eb:22:cd:89:5c:
         aa:9b:b8:16:a8:91:5a:73:bb:b6:2b:25:8e:1d:81:ad:93:37:
         e7:94:7f:84:50:2e:1d:bc:f7:72:19:96:b7:4b:ae:cd:ab:7a:
         02:37:f4:fd:c4:29:35:75:80:d0:48:de:33:e2:b9:e3:b6:ac:
         4d:fc:d1:ed:6b:12:f0:a6:82:b3:2a:6b:93:02:25:3d:12:b2:
         b7:a0:7b:26:ce:51:cf:be:a8:af:db:39:f0:da:34:6f:14:60:
         da:33:6a:4f:10:4f:a0:24:e7:e2:3d:5d:49:a3:9c:9e:75:7c:
         66:5f:30:d8:7a:74:33:8f:4e:09:08:4b:69:89:d3:33:70:ae:
         49:24:1d:91:b1:c4:3c:00:53:f7:3f:a3:82:f6:9b:a2:ce:76:
         cb:f9:d3:5b:c1:2d:9a:ee:f8:a9:d4:14:e5:b1:35:30:54:1b:
         cd:8b:cd:cb:3b:59:84:fa:b1:d1:72:7f:af:fe:6d:5a:f0:5a:
         74:be:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:19:08 2025 by rpki-client