Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa
File:                     dafd9971-626b-322d-9b3c-613672dbce51.roa (raw, json)
Hash identifier:          A25ytENGVGlNBIK3Yl6QcZNxuZ1rSVCpEgDANYpcrdw=
Subject key identifier:   19:AF:4A:98:32:9A:D2:75:E8:D2:17:BF:F3:5A:42:B6:FF:49:8F:40
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584A1895455807AFB49AC7B1A280
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     26523
IP address blocks:        2604:2f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:45:58:07:af:b4:9a:c7:b1:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=75de53f0-ec18-42ab-ba39-7194b0bcce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:f6:1b:0b:2f:49:05:39:6c:2f:c0:d5:5a:
                    0b:1b:b7:91:51:bd:8b:fb:dc:4d:2e:37:82:5f:6e:
                    a2:e5:45:0b:9f:fc:70:25:b0:bc:a5:83:f4:5a:1f:
                    e1:59:55:ea:de:03:39:cd:cf:32:99:b7:15:40:54:
                    83:c0:2f:b0:4b:be:6e:3f:a3:c5:64:16:b6:29:5e:
                    70:cb:f7:1d:59:f5:6d:2f:12:40:a1:00:eb:49:7f:
                    f7:f9:d6:d4:98:44:77:a3:1b:4d:96:20:05:a3:e1:
                    09:4c:1e:7b:28:aa:00:6b:7f:b2:e0:4f:d4:f4:1f:
                    3e:3d:08:b0:c0:e6:0e:05:5e:94:c3:07:04:7a:9c:
                    1d:20:c9:9b:75:09:72:7a:0c:d2:cd:6e:f1:64:97:
                    3c:fd:75:ec:da:e2:6b:fe:0e:f4:d1:5b:dd:75:dc:
                    af:a8:bf:d1:5f:18:53:17:9e:a9:26:91:d4:62:ff:
                    6c:b2:d3:57:10:ec:42:8f:e0:18:18:ee:ee:94:f0:
                    20:8a:60:5d:01:05:ba:ec:d5:f3:a2:ef:da:d3:df:
                    b3:ff:12:8a:0d:9a:be:68:60:8d:8f:7c:1a:54:a4:
                    16:6a:58:8e:b3:d8:a2:f6:f1:49:b6:9f:5d:42:a6:
                    1e:49:62:f9:c3:31:44:91:95:dd:41:37:9c:86:ee:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:4A:98:32:9A:D2:75:E8:D2:17:BF:F3:5A:42:B6:FF:49:8F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/dafd9971-626b-322d-9b3c-613672dbce51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:3b:85:f1:e5:cc:a2:9c:9f:fc:3c:2c:9b:86:9f:72:6d:
         86:99:47:5f:97:94:1d:66:2a:1d:4e:3f:85:ef:82:f8:46:72:
         27:7f:3e:56:7d:a8:2d:cc:62:d5:ef:d5:14:69:b5:1d:8d:df:
         c2:e6:7f:2f:8c:00:aa:21:9f:1d:10:e9:2e:e9:5a:f7:1c:74:
         2a:b0:dd:25:6b:07:66:6b:7e:16:95:29:94:25:98:f5:7d:7a:
         a0:18:b3:41:68:ba:57:47:6e:bd:18:89:f0:ec:a4:72:46:ee:
         74:cb:06:eb:a6:e8:c4:08:a9:73:01:f4:a0:db:5d:d9:9f:1a:
         b8:fb:ea:df:80:4a:14:bf:33:bc:4b:9e:97:b5:da:0b:a7:37:
         c8:77:47:5f:2b:a2:2b:0f:c0:e8:44:d8:5a:06:62:bb:b5:1e:
         ae:7a:9c:ac:07:97:bf:90:69:5f:a2:50:e3:85:41:7f:a5:b9:
         1a:57:61:05:f2:e6:94:45:63:60:09:4f:bc:87:26:06:22:eb:
         79:0f:eb:2c:52:d3:cc:db:b0:a1:25:60:23:a5:a2:a0:9f:16:
         62:83:19:2b:80:b5:42:a9:bc:23:2c:71:45:53:a5:da:23:d6:
         c7:d0:34:cd:ea:49:e4:7a:a9:53:68:58:2f:0a:b2:51:b9:27:
         d2:28:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:59:45 2025 by rpki-client