Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
File:                     c30fd692-555a-30f5-ae22-c5c6ecece012.roa (raw, json)
Hash identifier:          GzKf816JsR0x8sEs3dKWm/Vb78hTT12GWbDhC0KP+1A=
Subject key identifier:   7F:8D:31:A6:BD:5B:E0:3F:EA:37:86:76:A2:A2:85:60:FA:E2:E7:9B
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F43285849EBEA56A80DCFE1E1D73CDE78
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     401529
IP address blocks:        2607:e440::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:56:a8:0d:cf:e1:e1:d7:3c:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=dfc6a26b-2763-4b4d-90f0-ba4649a5a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:eb:04:d4:c2:cc:cb:b9:c8:e4:8c:6f:0c:
                    a6:b0:08:7d:a7:15:59:0c:44:04:5b:de:f1:b1:6d:
                    ba:15:1e:eb:51:f8:21:c5:7a:81:2b:5b:6f:22:8c:
                    3c:8e:fd:93:77:65:86:05:78:7b:a1:1a:f6:12:81:
                    5c:01:b8:84:b9:bc:ca:aa:c8:ba:86:12:d0:25:2e:
                    ba:88:9b:5b:57:1c:2c:bb:e9:b1:c0:c6:05:93:dd:
                    19:d0:15:4a:db:85:d0:a4:f7:34:a1:63:63:29:01:
                    f5:13:0e:37:8e:ca:61:37:a4:ac:f1:86:ee:0f:69:
                    46:03:41:53:81:d3:f1:5f:fd:98:5c:d7:7c:50:9d:
                    20:cb:14:0c:d1:15:60:56:1f:b8:1a:bd:ac:c9:23:
                    f1:db:77:6c:68:9d:4e:06:86:ff:1d:88:f5:7d:d0:
                    72:31:e4:b0:37:aa:39:8f:be:6b:5a:04:c2:a2:bb:
                    3d:96:63:9f:8b:c0:7a:05:77:6f:6f:75:06:5f:44:
                    23:b5:79:47:32:33:35:52:e1:b2:35:32:7d:1f:31:
                    cd:65:0f:70:d8:d6:f5:8f:9b:dc:08:64:cd:ff:13:
                    a2:2f:e2:ea:f0:f6:49:3a:dc:96:e5:de:e1:31:8f:
                    b8:51:4e:49:42:59:df:3a:14:43:80:77:53:c4:66:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:31:A6:BD:5B:E0:3F:EA:37:86:76:A2:A2:85:60:FA:E2:E7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e440::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:62:aa:7c:c8:88:5f:95:b7:30:1a:f9:b2:da:c9:4b:6c:63:
         53:90:1a:33:5c:22:cf:c4:8b:1a:2b:7f:ed:ae:7f:5b:d9:b6:
         7a:c2:a6:9e:52:68:11:c1:6b:3d:b5:29:b9:a8:a9:07:ee:79:
         f1:13:d3:e1:cc:fb:75:7d:bd:ab:97:87:06:a1:1c:75:c4:6c:
         9e:71:43:d3:46:61:d3:c7:16:08:c5:35:14:1c:87:5d:03:a4:
         05:33:44:fe:8b:7f:a4:e5:6e:ea:f0:32:0e:9e:db:92:2c:79:
         a3:f3:7d:fa:98:b5:18:25:4a:23:0f:c3:90:20:a5:fd:3a:c5:
         8d:b6:21:3d:f4:3b:26:59:c2:60:ed:cb:0f:28:a0:26:67:21:
         05:06:7f:94:99:f3:94:f3:13:57:ea:10:cd:c8:b9:52:4e:e4:
         1b:be:bf:e5:da:fa:82:0e:0c:99:e5:13:9b:fb:6c:16:69:5a:
         95:c9:16:66:c2:3e:f9:98:30:e0:1a:83:74:50:74:49:29:e3:
         cf:82:4c:54:84:57:ed:6e:f8:e2:ed:da:3d:a3:02:52:ff:43:
         15:ab:7e:b2:5a:06:e0:df:f4:16:57:5a:4d:ef:2f:0a:5a:26:
         b0:5f:25:7b:f0:68:91:a6:57:cf:9b:a9:b2:64:8a:28:24:3e:
         b4:b0:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:58:45 2025 by rpki-client