Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa
File:                     8674162a-9330-33c7-b0e9-15290762bc3b.roa (raw, json)
Hash identifier:          hOlNMk334vAhnPfbagxreRfzOAw+Jd2Mkr2Uq6+18Sg=
Subject key identifier:   1B:2D:22:20:07:FF:7D:DE:47:67:FD:B5:D3:E4:3C:AE:DA:D0:BB:B7
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A23C017A6152FACF8A611E080
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2153
IP address blocks:        2607:f380:4:4004::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:17:a6:15:2f:ac:f8:a6:11:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=719ab04c-a98d-4dc3-8030-dece5ecd7c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:03:f6:86:cf:66:01:80:30:3f:a7:26:30:
                    5c:87:dc:46:99:90:d9:6c:64:e9:54:05:45:5f:00:
                    38:f3:08:35:bb:d3:6d:2e:7c:9e:4e:60:db:8f:3e:
                    51:5c:67:b5:cb:02:90:de:38:cc:ba:3c:27:54:dc:
                    dd:3b:ea:0a:1b:02:f4:4a:a7:78:a6:1b:68:02:e5:
                    06:68:92:5b:0e:95:10:e7:62:5e:ba:a6:51:20:26:
                    7c:99:02:be:85:fe:b4:ec:c2:00:b6:94:69:94:41:
                    74:69:b4:f7:e2:8e:05:c1:97:cc:c1:43:2f:f2:1f:
                    30:8b:92:d2:f2:6f:ab:7b:09:99:90:e1:d0:24:ed:
                    44:cd:1b:ee:bd:89:e3:51:4f:c2:a3:dc:9f:bb:3b:
                    a3:5e:0d:21:3a:ef:36:ec:44:ac:00:dc:dc:ed:a6:
                    6c:bb:95:bc:36:e1:e7:c8:15:8c:26:ff:14:3a:47:
                    28:35:17:72:44:51:cd:05:39:ad:51:b7:51:37:01:
                    44:96:13:ea:43:16:95:dc:58:6d:2f:38:a6:ea:d7:
                    00:19:76:df:5d:53:97:7c:e1:ea:89:bf:66:17:0f:
                    99:80:73:91:97:3e:51:53:12:a9:b0:57:87:78:07:
                    f9:95:b4:c4:5d:70:c4:10:09:da:8c:89:2b:c0:1d:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2D:22:20:07:FF:7D:DE:47:67:FD:B5:D3:E4:3C:AE:DA:D0:BB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:4:4004::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:38:55:14:16:cd:95:67:83:cf:24:61:74:e9:d6:fd:0b:82:
         45:f2:33:2d:ed:14:17:34:af:56:a4:4e:ba:d8:b1:61:9b:30:
         60:72:61:93:d7:b8:ff:bc:88:bb:75:42:bb:ea:08:ea:ac:fc:
         de:3d:2f:9d:48:20:55:da:54:80:dc:8c:08:c1:c5:3c:73:6f:
         49:73:6d:ba:a2:09:b0:4e:a2:0f:6a:bc:d9:64:09:0a:fb:a6:
         b2:ca:2f:e1:90:1d:fa:b7:5d:7a:46:43:3b:d9:78:97:66:28:
         98:0a:65:c4:5e:b6:74:1e:56:39:a7:07:90:25:ad:f1:7f:7a:
         8b:34:36:85:bb:1b:32:f7:2e:26:b4:98:91:d8:09:70:a3:ff:
         32:9e:2d:7f:2e:09:6a:f8:2f:3d:11:b5:be:41:aa:bb:08:7f:
         cb:04:39:3f:a3:64:25:a8:07:60:93:c7:57:db:8c:16:44:2c:
         ba:23:c5:b1:11:6f:34:43:1c:ac:9e:48:33:9f:92:1a:04:ce:
         86:aa:26:2b:e7:d9:75:21:2c:f5:3a:8e:ec:95:48:17:fb:e2:
         12:55:a5:46:1e:78:71:4e:bd:3f:09:52:60:85:a6:5e:99:99:
         71:4a:ce:57:c4:03:e8:91:eb:cb:b0:a6:8f:92:9d:ea:bc:5c:
         15:92:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:59:59 2025 by rpki-client