Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa
File:                     cf900358-a274-3b37-a41d-296981ab2973.roa (raw, json)
Hash identifier:          qkN6qY/3SMiWrRsaMRAqHxdFb00WRyTGmX1S9YNjO5M=
Subject key identifier:   A1:1D:BE:80:6B:5D:25:E2:07:CB:4B:00:43:95:E4:F0:A8:C1:B5:55
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB011ED5470B9962ECE8B60
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        2605:4300:2700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:11:ed:54:70:b9:96:2e:ce:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=29e36d6f-95b5-4922-a405-91df1785be18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:36:79:e5:5a:8d:e9:31:dc:ce:62:6e:22:
                    c8:d7:b9:4e:ec:4f:88:b6:cc:b9:d4:30:23:cb:d9:
                    31:7f:14:df:ae:5d:4c:e2:ae:5f:7c:96:33:5a:4e:
                    b6:7e:35:85:7a:b3:ae:f9:9d:e1:42:db:93:52:ef:
                    9d:90:22:03:f7:57:04:a7:2f:6c:76:ac:40:af:dc:
                    08:d2:19:f0:0f:22:04:be:ea:06:03:0c:82:be:c6:
                    8e:d7:19:d5:ce:cf:15:d2:7a:04:8d:42:03:ba:e2:
                    9e:77:fc:23:a6:69:58:55:15:42:ee:42:cc:64:c4:
                    20:49:ea:dc:d2:38:7a:60:10:f2:f8:16:f2:af:b1:
                    dd:d3:7d:a2:64:dd:bd:26:6e:87:9a:35:18:12:e8:
                    cf:22:24:33:54:68:67:31:3e:5b:3c:36:5a:f1:e6:
                    0a:b0:bd:50:64:c0:c4:9d:b6:1b:fa:5d:84:cc:3c:
                    b2:bb:ff:97:ce:0e:bd:3e:c3:b5:18:b0:d7:47:e6:
                    53:ee:82:05:8b:1c:78:34:7f:ee:61:0e:ca:2b:a4:
                    d8:7c:74:bb:7b:7f:0d:57:3e:71:e7:80:47:d0:98:
                    9c:63:ba:e8:0e:d8:a4:51:87:48:ca:54:1f:79:c8:
                    a8:63:b7:2b:ab:dd:86:63:f2:22:25:4f:0e:22:5b:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:BE:80:6B:5D:25:E2:07:CB:4B:00:43:95:E4:F0:A8:C1:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:71:ea:96:0b:dc:f4:4b:3c:49:0f:b0:15:57:c2:1f:cb:31:
         bd:1e:ae:85:c1:7c:fb:47:d0:24:ad:54:2e:7b:80:ee:cb:2a:
         4b:7a:61:b2:cc:9d:2d:e1:87:4d:49:53:b5:74:3d:1c:48:d2:
         c9:96:70:3e:34:f6:08:6c:e2:f8:45:87:c0:df:ee:c4:66:e0:
         75:38:f2:c0:ae:b9:19:2a:ee:8a:99:76:d4:d5:6a:98:fa:56:
         fd:0b:99:b8:3b:a1:b4:57:8d:ea:96:2d:cc:bb:49:e0:48:f7:
         fa:39:7b:2f:51:0f:aa:78:46:2c:db:b0:24:b9:0e:e2:7b:b0:
         11:73:55:07:7a:9d:54:1b:42:ee:5e:e2:38:94:0e:85:41:70:
         86:ca:ea:ea:25:af:9d:86:25:94:0f:5a:42:7e:5b:c6:49:dc:
         68:93:0f:10:da:02:0c:9d:a6:06:a9:02:d0:37:c5:74:e5:78:
         ed:d4:ea:e2:a2:80:07:82:6e:e3:fb:b8:49:fa:75:f8:7b:8a:
         e2:56:1e:e3:17:fe:ae:80:4a:7f:91:7d:a8:a0:fc:1c:d4:8c:
         7d:43:e9:93:17:79:98:31:bd:0a:c8:3d:f7:97:4d:17:15:ea:
         de:e3:d1:b8:6c:e6:3b:c3:34:4b:df:31:e8:e2:d0:ba:04:c5:
         1e:8d:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:22 2025 by rpki-client