Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa
File:                     f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa (raw, json)
Hash identifier:          6+AoSIfuY+mPTtVa6hMLcGEVOwL1aA74ezheWjSuEXA=
Subject key identifier:   4A:4F:E2:D5:87:F3:2E:FA:1C:B1:4E:E5:7D:EA:28:94:8E:08:33:8B
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584A9E9619F071D7D74F4B1D84A0
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     8070
IP address blocks:        2601:9200:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:19:f0:71:d7:d7:4f:4b:1d:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=80e13836-f521-40fd-86ef-5578170646a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:8e:ad:d7:fe:40:b3:d7:88:5a:fd:8f:af:
                    d9:c7:ef:82:9f:14:0f:a7:f5:33:8a:22:c2:e5:35:
                    1a:37:7d:b9:e7:26:57:59:44:b9:8b:bd:43:6c:38:
                    57:ed:44:8c:d7:e1:ff:aa:08:d9:7b:10:4c:87:33:
                    e8:0f:31:cd:74:42:58:ce:73:d0:51:70:1a:be:03:
                    74:e4:31:7e:14:18:6b:37:ef:b2:4a:47:14:46:c4:
                    0d:5d:52:0e:83:3e:00:84:42:4f:02:a7:72:e2:b5:
                    2d:ba:e9:2f:69:dd:3d:91:4b:0a:ae:5d:db:d2:83:
                    bd:61:44:f0:94:cc:a5:e9:35:41:12:f2:71:8e:f3:
                    83:2a:77:b6:5c:4a:38:00:bf:c9:41:04:0b:04:ab:
                    09:d7:8d:e7:cd:7d:00:cf:14:09:a8:6e:26:b9:17:
                    cc:34:17:68:f8:da:67:5e:9f:c4:88:8c:28:e2:29:
                    b1:e4:aa:fd:2e:6b:4b:a0:4c:c2:8c:22:8d:aa:4c:
                    a6:39:72:fb:64:f8:1b:91:6e:84:78:10:22:8c:8a:
                    62:9f:8c:e9:05:99:d7:80:75:19:13:e7:aa:39:a8:
                    86:da:cd:d3:5f:40:51:cd:80:67:14:7e:26:1d:ff:
                    2f:5c:20:49:89:42:03:68:eb:fc:80:cd:17:4d:e2:
                    52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:E2:D5:87:F3:2E:FA:1C:B1:4E:E5:7D:EA:28:94:8E:08:33:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/f68adc7b-5d4a-3ffe-9c96-e6a82e1053c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:40:98:8c:e7:2b:0c:58:9a:47:6a:1b:b7:bd:ed:9f:00:a0:
         2a:61:28:f8:63:57:13:21:0a:35:cd:83:a6:4e:a0:76:5c:e9:
         35:e9:eb:51:11:d8:bd:a0:e2:de:10:03:07:a8:b6:0b:cf:53:
         4c:67:7d:cd:b2:71:0d:e4:68:5b:63:7c:88:fe:6f:76:b6:59:
         f4:fc:87:9f:9b:dd:69:24:a4:ef:9b:68:c4:11:5a:f5:2d:b7:
         6b:e3:9d:15:35:d4:5b:d1:c4:a5:ba:96:f6:24:0b:8b:9f:7f:
         9c:d2:74:14:b0:03:4a:ed:fe:f6:d0:63:cc:9f:8d:99:23:88:
         fc:bd:14:45:73:45:b6:6c:90:d0:a9:02:3d:3d:28:f9:36:de:
         39:fc:f9:2a:7f:cb:88:3e:aa:af:20:5d:35:75:e8:81:9d:4b:
         b6:c9:80:d4:7c:4d:30:ce:8c:af:b2:2d:e1:5e:1f:98:53:f9:
         21:d0:e3:a6:1c:55:7a:0e:27:10:cc:7d:46:ee:8f:62:34:03:
         ed:7e:24:b4:ed:be:16:b6:f5:67:68:85:e4:20:03:73:9f:04:
         02:90:92:39:d1:61:4d:24:cb:78:d3:2d:b4:03:93:88:ee:f7:
         eb:01:dd:0c:f3:5e:62:c7:a9:d6:b9:e2:59:65:7c:60:6a:b1:
         47:d7:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:48 2025 by rpki-client