Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa
File:                     1830d782-64ca-3a50-8614-c6840f83b8f8.roa (raw, json)
Hash identifier:          byAM6/nruYfauD7qbNas3n/bH/cFj+SLcdKv4KDRNpA=
Subject key identifier:   DA:71:B3:7B:AA:A7:73:F1:10:CA:79:B5:44:0A:C4:F5:86:E4:B6:C1
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F43285849E0BF8A55684159B396BCE3A0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        2620:7d:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8a:55:68:41:59:b3:96:bc:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=f6d7a5a4-953e-4df8-ad96-571b53d62e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:bd:e5:42:81:80:89:5b:49:4c:94:e5:34:
                    7a:c1:53:f5:55:62:3f:6d:1d:46:f6:db:d4:03:76:
                    45:a9:44:09:6c:43:1c:c1:f5:aa:af:0f:7d:9e:54:
                    9c:5b:48:32:65:5d:78:47:cf:10:31:b5:b7:7c:07:
                    78:fe:f4:1b:ef:91:a5:a4:9d:1f:3f:0b:18:cd:d2:
                    20:b0:b9:a4:31:f3:61:e3:29:5e:60:cb:7d:4c:0a:
                    f5:39:15:df:92:b4:fb:a4:87:73:ce:59:5c:88:ad:
                    7e:d6:cf:fb:6a:9b:b1:a5:85:08:8b:ab:13:74:f0:
                    f6:76:3a:7d:ee:28:c3:36:62:76:97:6e:5b:b0:6d:
                    20:5d:e2:df:d4:71:23:36:46:16:8b:64:c2:f3:73:
                    e3:59:de:aa:f4:e8:2d:aa:70:81:91:ec:6a:7e:2a:
                    fa:c6:65:19:fe:10:db:00:18:00:e7:86:94:b1:52:
                    5d:e2:ea:45:10:96:5b:3d:4b:be:23:e8:4a:04:99:
                    43:19:42:5a:a6:e3:d7:8f:fb:8e:4b:72:3d:66:34:
                    30:a3:44:49:d8:2f:67:c3:78:56:ea:cd:31:b1:34:
                    c7:77:59:e7:a3:c1:df:a5:c6:69:04:31:12:4c:a0:
                    c0:c6:3a:83:d8:d9:25:16:6c:12:d1:80:b2:f7:e8:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:71:B3:7B:AA:A7:73:F1:10:CA:79:B5:44:0A:C4:F5:86:E4:B6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7d:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d0:c6:f2:92:0c:8b:60:a0:1b:7e:9d:7f:43:4b:91:10:ce:
         80:e2:68:39:96:a4:88:21:26:9d:89:8e:bc:07:e2:ef:5e:b9:
         a2:53:2d:e3:8a:b1:d0:21:72:1f:81:b3:94:d2:74:7a:b3:14:
         fb:d7:75:40:17:41:1e:66:0b:c2:34:bb:68:6b:0b:69:d9:f2:
         38:98:4d:22:05:e8:f0:01:f9:f6:c9:83:11:d5:b7:51:2c:23:
         0c:5f:1b:69:af:33:d5:b0:97:e2:5b:ed:19:88:4b:d2:32:6a:
         aa:67:6c:bf:62:1e:ac:a1:93:9a:b1:46:1b:5c:30:11:db:26:
         50:89:bc:f0:00:6b:85:fa:0a:1a:bd:5f:6c:85:12:44:e1:9f:
         59:6f:23:7f:57:ba:fd:f0:9f:cc:37:8b:73:82:a1:b7:76:58:
         a4:2d:88:56:c1:f6:f9:a4:92:25:17:a1:55:35:5c:3c:9e:c0:
         8e:eb:4f:a0:6b:e6:a5:52:47:9b:10:f3:f1:11:85:ae:97:51:
         1e:7b:c6:3b:98:b5:5b:47:dd:c7:53:bb:46:eb:c3:d1:70:43:
         96:82:a2:6b:ce:44:68:3e:8f:55:2c:8c:8a:db:33:ac:e4:b5:
         cd:44:6a:f5:09:5c:0c:d8:95:87:65:1e:5a:d5:eb:8d:81:4c:
         df:d8:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:55:40 2025 by rpki-client