Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa
File:                     0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa (raw, json)
Hash identifier:          G2ZJGESextjpS5uaWQse9WKHtVsssDXNQOVxH8ZI9VQ=
Subject key identifier:   D2:CB:C1:93:6B:A1:26:4A:D3:3F:89:81:93:33:E7:DB:F2:81:B4:CB
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584A7A4B486C257A6B5A7CF91D80
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     26810
IP address blocks:        2601:9000::/20 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:48:6c:25:7a:6b:5a:7c:f9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7fd8b67b-a77b-4daa-b1e4-362205da6cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:7b:4e:c7:15:3c:16:71:ae:c9:30:ca:9b:
                    e7:56:82:00:cc:b5:38:a7:48:5b:dc:e0:64:96:bd:
                    f2:ce:17:c1:04:b5:c4:9e:0f:07:c9:82:d8:c6:78:
                    3a:19:af:9b:8a:80:a2:d5:e6:39:67:9b:2a:2d:16:
                    3c:29:4d:99:69:2e:53:3d:db:20:fc:d4:b8:b1:0a:
                    a7:69:40:1f:9f:52:79:65:ca:2a:d9:e5:a1:75:c1:
                    f3:3d:0f:7b:57:74:cd:26:bb:62:94:d6:7e:af:4d:
                    fb:18:50:88:84:92:dc:ed:99:16:f2:e5:0c:84:de:
                    04:45:8f:29:43:fe:bf:db:3a:b0:94:49:04:7d:7f:
                    55:0c:8a:68:c4:ec:d4:8e:d1:b8:44:e4:36:4d:53:
                    0c:13:fc:ad:d1:2d:4a:11:d5:b9:0a:6c:7b:12:88:
                    e2:93:0e:36:51:38:02:aa:5a:8e:b0:60:22:f0:85:
                    1a:8e:c2:75:ab:e9:f9:ed:17:ef:65:09:e6:de:e0:
                    cf:f2:b2:cd:ed:fb:b9:69:58:78:72:bb:ea:37:05:
                    5c:f8:c3:04:2a:c3:3e:76:55:67:29:1c:8c:bc:9e:
                    a6:8d:fc:36:f0:ae:e6:80:8d:2d:8e:6b:f6:f5:b1:
                    1e:64:51:2b:d8:a7:61:2a:63:37:63:39:b9:40:b4:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:C1:93:6B:A1:26:4A:D3:3F:89:81:93:33:E7:DB:F2:81:B4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:85:68:9e:27:3b:91:02:c4:5e:25:9c:00:03:f2:44:e6:
         5d:8c:3f:dc:73:29:55:49:69:1c:9f:1b:fb:5c:be:d3:d7:66:
         5f:4b:98:15:21:db:3b:bc:19:00:d2:63:9b:e4:27:23:a6:bd:
         1c:5b:25:b6:37:ea:ef:c0:1d:c5:80:d8:94:79:0a:90:65:21:
         09:e5:b4:bd:c1:d0:57:dc:13:15:f4:fe:cc:15:97:39:a5:a8:
         c8:73:92:fe:44:12:f3:4c:11:9c:b7:91:90:82:54:4b:b5:01:
         cd:6f:8d:44:fe:0c:a0:94:2d:d6:27:44:75:81:18:a7:a1:59:
         83:13:e4:54:4b:99:b5:d5:2b:e6:99:9d:26:0c:30:f0:58:8e:
         9b:47:a1:c1:9b:d7:7b:ce:ed:7b:7b:2f:3f:04:c1:96:c7:78:
         f2:60:15:b1:e7:7a:5a:ff:b0:66:0c:e9:0c:b7:21:00:0c:63:
         ab:d2:df:8c:ec:8f:a0:2c:42:46:87:2c:65:79:18:c7:98:d7:
         5b:fb:2f:70:c4:7d:13:7a:84:9e:42:07:3f:89:65:ce:bd:7e:
         df:d9:c2:10:21:97:c3:d8:48:20:a4:30:89:9f:46:57:8f:59:
         d0:5b:d3:4e:a8:89:80:1a:39:d0:ee:9a:a5:9d:32:ba:07:00:
         f5:0f:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:21 2025 by rpki-client