Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File:                     7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier:          b8swgnk8Ntz/ovdiD4aKPS8Q17yXCzgZcMP6gV1kqZQ=
Subject key identifier:   E0:75:BC:A0:3D:02:C0:51:6A:51:8D:B1:30:5C:1F:BC:33:5C:AE:86
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584AC87635A2CA1577B9DD375640
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     46562
IP address blocks:        2604:2880::/32 maxlen: 64
                          2607:f7a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:35:a2:ca:15:77:b9:dd:37:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=26f05bd5-053e-430f-a90c-8b0004015237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:f5:e9:58:bc:08:c0:07:09:0d:ff:35:d5:
                    0a:c5:e8:d6:7e:f7:58:51:16:36:81:12:e8:34:d3:
                    56:b6:3a:7f:54:7e:50:d5:91:da:de:65:f3:ea:16:
                    71:58:73:2d:93:29:39:56:ed:b2:38:0b:92:f9:dc:
                    38:38:d9:eb:36:e0:bf:4b:d0:79:a4:1f:4a:45:54:
                    a5:77:b1:40:c9:48:4e:c3:46:4c:ae:0e:d7:1a:b3:
                    1b:bd:34:3a:25:e2:a0:5d:0f:bf:61:02:42:89:cb:
                    f3:90:99:48:94:55:bf:1f:a6:99:94:47:ab:a0:a0:
                    3e:c8:37:fc:6d:67:2d:d0:70:50:38:00:0c:b6:bf:
                    e2:ae:d1:0d:a6:98:26:54:ba:91:88:f0:cf:ff:cb:
                    b8:9f:31:c3:51:f0:bf:5c:d0:9b:30:34:16:b4:33:
                    6a:5f:7a:ac:c2:dd:74:b2:9a:10:f6:a6:eb:d7:b9:
                    4d:f9:e9:2a:7f:87:a2:c7:21:12:09:7f:4a:c6:37:
                    de:b4:5f:ed:bc:96:02:f2:73:b2:13:73:eb:46:0b:
                    62:5e:bf:b9:42:a1:45:70:88:f5:88:64:c5:04:dd:
                    18:62:82:3f:76:e2:c5:fb:bc:75:c7:2c:8e:56:a2:
                    c4:cd:e3:b1:a8:72:89:5d:8b:59:56:c4:67:63:e8:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:BC:A0:3D:02:C0:51:6A:51:8D:B1:30:5C:1F:BC:33:5C:AE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2880::/32
                  2607:f7a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:f3:2b:84:dd:85:5f:07:e0:95:5b:45:1a:5f:4d:25:05:
         9f:de:9a:f6:57:d1:58:3e:35:12:4b:66:ee:2f:eb:7b:42:ff:
         ef:88:20:41:f5:b9:ce:07:7d:88:27:07:06:08:8c:ce:72:f2:
         bf:b4:31:50:f2:63:c7:8b:43:b8:60:7f:15:33:b5:47:93:fb:
         a9:d4:b6:93:fd:21:33:ca:22:23:1a:4f:51:06:3d:42:8b:7d:
         db:d6:d4:c7:e1:d8:99:06:ad:8e:38:41:6d:d0:83:ef:17:71:
         d1:32:34:0d:b1:6f:66:79:b2:91:fb:dc:e3:cb:31:95:62:fe:
         b9:26:b3:41:64:03:1f:4e:81:7d:bf:f2:1d:30:b7:12:cf:f2:
         93:24:0e:85:fa:42:79:df:60:1f:30:3e:5f:18:8e:f8:c8:71:
         74:d7:4c:b2:6e:07:b7:48:e9:8e:31:f7:52:06:a8:60:98:55:
         a7:e4:59:49:f5:35:43:48:1d:68:49:30:b3:39:63:88:f6:cc:
         01:07:e2:57:fd:53:69:6e:42:fb:33:78:a6:bc:84:e8:a9:d9:
         61:db:11:26:bd:61:35:3b:7f:a6:f6:57:fc:ce:2f:9a:65:58:
         3f:3b:3e:a6:46:46:f5:93:08:8b:e7:5d:2f:49:c6:09:81:72:
         b3:99:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:04:42 2025 by rpki-client