Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/d3a637e5-61f4-3ee9-9c44-4234c7cbcf53.roa
File:                     d3a637e5-61f4-3ee9-9c44-4234c7cbcf53.roa (raw, json)
Hash identifier:          w6rIIf6l6HVelw+wxtfuLZ7l5jqHu/fxvz1tYNk84tE=
Subject key identifier:   28:5D:92:E3:33:D9:B6:52:2E:8C:21:C4:6D:AC:63:C9:20:BB:A7:25
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584A87DBFCE4E8174F8ABD4BD0C0
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/d3a637e5-61f4-3ee9-9c44-4234c7cbcf53.roa
Signing time:             Tue 15 Jul 2025 21:38:08 +0000
ROA not before:           Tue 15 Jul 2025 21:38:08 +0000
ROA not after:            Mon 13 Oct 2025 21:38:08 +0000
asID:                     400400
IP address blocks:        2607:c880:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:db:fc:e4:e8:17:4f:8a:bd:4b:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Jul 15 21:38:08 2025 GMT
            Not After : Oct 13 21:38:08 2025 GMT
        Subject: CN=a2077a85-65a1-43ab-acc6-36fe5e602dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:ca:da:79:eb:5c:e1:4f:5e:3f:96:ec:85:
                    e2:7f:31:f9:9e:af:73:75:e0:82:a6:22:ca:eb:bf:
                    e6:a2:ae:78:0e:29:b2:6b:e8:b5:ba:a9:5e:28:00:
                    cc:42:37:4a:15:56:36:c6:03:d3:ff:27:6a:70:9f:
                    d5:80:e7:f1:6d:49:40:dc:b7:86:7b:93:43:4d:95:
                    2a:42:4a:73:10:66:4e:09:d3:19:6c:8a:ba:c2:7f:
                    73:43:28:77:c3:8f:02:b1:b4:72:bf:c4:1e:80:f3:
                    21:a7:5d:f4:1c:c8:21:2f:6a:db:cd:72:e6:eb:e0:
                    ed:84:5c:19:9d:25:a4:ee:b8:3d:49:d6:e7:05:9e:
                    c2:9c:25:88:b4:29:0d:0d:7c:97:a7:a3:9b:68:59:
                    c4:ef:59:b7:15:ab:1c:a9:3b:03:40:44:db:4f:fe:
                    27:35:13:f0:88:c8:b2:a5:31:d7:6d:41:f4:28:e4:
                    5b:d1:70:55:d2:9f:74:2f:95:06:40:d7:b5:e2:fb:
                    aa:2d:0f:0a:f5:3b:77:f7:25:0a:96:16:46:58:7b:
                    fc:f1:ea:4f:13:49:76:96:55:4c:c6:a6:59:9a:90:
                    40:b2:cb:cd:58:65:47:6a:1f:a9:7a:98:af:db:28:
                    87:cc:a0:f2:cb:fd:15:74:b8:bf:c8:35:4e:a0:39:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5D:92:E3:33:D9:B6:52:2E:8C:21:C4:6D:AC:63:C9:20:BB:A7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/d3a637e5-61f4-3ee9-9c44-4234c7cbcf53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c880:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7f:40:1d:da:df:82:d5:26:0c:8b:49:5a:6b:0e:00:7a:c0:
         81:d8:a5:db:19:80:fa:b7:82:f3:17:f6:75:bc:ec:d8:0c:29:
         f0:a5:7b:20:d3:97:88:0a:ad:41:03:da:33:32:33:60:62:4d:
         f0:00:53:6c:42:74:77:2f:5d:3a:9e:f6:3d:bb:75:4d:75:3b:
         f9:66:29:24:4b:3c:b4:28:2f:ab:97:8a:2a:3c:b3:a0:82:6b:
         08:a8:6f:9e:8d:cf:dc:22:28:a2:3b:66:65:c3:4b:6c:31:4d:
         53:91:1d:23:85:a5:af:b6:b8:6d:5f:fa:f1:da:99:6e:48:34:
         c3:ad:9e:ef:84:f3:03:0d:d2:ae:ed:7e:2c:13:9c:29:56:5c:
         e8:14:49:e3:6b:c6:1c:8c:2f:40:31:80:9e:1a:8c:db:c3:86:
         c8:df:4a:e4:81:ae:d6:85:ca:46:15:d3:fe:05:3a:f0:8d:be:
         bf:93:43:1c:bc:a9:1a:f9:23:83:af:3b:53:1b:eb:c1:f5:42:
         41:2a:fa:09:87:49:58:34:7b:a5:24:a9:df:24:5a:12:90:95:
         10:a6:9f:cc:7b:42:7b:1c:01:0b:52:de:30:ba:f7:4f:05:23:
         0b:34:bc:16:3f:03:44:14:e8:27:27:6a:bf:ef:3e:89:56:ee:
         ac:55:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:40 2025 by rpki-client