Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
File:                     ac875a1c-9281-3995-b271-cdb8f627c087.roa (raw, json)
Hash identifier:          92upe+ZC4xvnHIESZPwxaSVjlLvU9vcXyvqNqiLxal0=
Subject key identifier:   B4:6F:C2:87:30:B0:4B:70:7D:57:D9:DA:DD:D9:C9:32:6E:54:21:5F
Certificate issuer:       /CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
Certificate serial:       010D0C9F4328584A9FFB999D8303849542150580
Authority key identifier: 43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     2552
IP address blocks:        2604:3e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:99:9d:83:03:84:95:42:15:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=721a1428-9412-4c94-af7f-be38a69dd511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:37:1b:46:23:c0:ba:7a:4d:81:78:08:fe:
                    11:9b:7e:10:f9:dd:f4:90:54:64:bb:ff:d3:b0:e5:
                    21:0b:99:d6:ea:58:66:bb:0f:16:29:bc:4b:cd:26:
                    78:f6:94:17:4f:ba:d2:09:af:eb:90:65:74:17:8b:
                    4a:ab:6e:25:4f:67:b2:59:b9:b1:f0:46:08:93:20:
                    c0:27:b3:0c:b6:ca:46:71:da:e7:99:a3:82:69:1a:
                    ae:d6:22:18:93:90:ce:2d:f9:a7:4e:4a:dd:51:b7:
                    e9:84:b7:0a:e2:3d:f0:97:3b:63:59:46:9f:57:00:
                    13:0b:09:36:ee:1f:a5:61:bb:4d:e0:4a:9f:a8:dd:
                    1d:8c:bf:8a:6f:b5:f5:a4:79:bd:d4:75:a5:70:a1:
                    76:44:5f:4a:a7:d7:9d:46:be:bb:5a:e1:87:47:27:
                    74:e4:01:bb:bc:4c:3c:e3:2e:2d:38:78:68:1d:1c:
                    32:b8:4d:d8:54:21:8a:b2:3c:5b:ee:0e:ea:f0:35:
                    50:a4:cb:67:d3:0e:91:59:34:b7:28:43:7e:84:86:
                    63:ad:cf:b8:bc:a4:e3:c3:4b:92:e2:6d:41:c3:1c:
                    cb:db:c3:02:59:06:70:d0:ca:f5:cc:97:10:03:e8:
                    4c:79:73:66:07:3b:74:4d:c8:ac:d4:96:c1:01:b6:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:C2:87:30:B0:4B:70:7D:57:D9:DA:DD:D9:C9:32:6E:54:21:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl

            X509v3 Authority Key Identifier:
                keyid:43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:19:2d:51:c3:1d:28:60:9c:e1:19:a8:09:ed:00:70:39:
         84:38:7a:d8:05:fc:c6:0b:19:48:bd:e2:0f:04:59:6d:b2:0c:
         3f:99:47:70:ff:52:65:83:87:82:7c:c6:cb:11:74:f2:61:0c:
         49:d4:b2:63:e8:de:48:40:cc:58:2a:bb:fe:34:fa:da:b1:35:
         9c:5f:12:09:7f:14:12:2c:03:75:eb:67:59:78:86:11:d3:d1:
         27:c3:97:af:00:ca:ca:bb:9d:25:61:e8:21:e3:07:b4:43:de:
         2c:d0:1a:4b:61:8d:21:41:38:a2:34:b3:7e:76:04:44:f0:9d:
         be:a4:9d:f3:b6:2b:a4:18:04:c2:12:4c:42:4c:88:03:d8:1b:
         f5:54:f4:80:08:d8:b8:44:61:fa:a6:2c:89:08:d2:85:26:5e:
         6b:a5:7b:b3:81:4b:04:77:1b:8b:5e:ec:ba:38:98:01:90:25:
         60:96:6d:78:15:0d:e7:df:12:95:23:95:bf:f6:dc:e2:60:c6:
         63:d5:a7:8e:5c:7c:d8:69:3b:d9:f2:67:50:d0:00:ce:b9:3a:
         4d:cf:96:9a:09:db:26:eb:15:3b:7e:a0:75:a3:46:bd:ba:f7:
         6f:d9:ff:2b:7e:6c:b3:e8:06:f3:72:d4:6c:e2:2f:7e:e8:a8:
         3a:d7:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:40 2025 by rpki-client