Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa
File:                     fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa (raw, json)
Hash identifier:          PdE748tRM4oN1/1D6CI551jukS73sLS0Ai3b7u8RoHI=
Subject key identifier:   5D:32:39:8D:8A:EE:1B:EE:9F:EA:4B:32:9C:C3:44:95:5C:CB:3A:31
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A8411967F5CF65CD2D024D780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        2620:0:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:96:7f:5c:f6:5c:d2:d0:24:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cbc6f90a-63ff-4b9c-bc61-3ddd85f2f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:34:5e:d1:bc:1b:7e:5c:24:5b:21:da:ce:
                    1b:73:29:83:42:fd:4c:a8:19:69:ec:5c:2e:ea:75:
                    32:2e:31:be:ef:cc:c5:11:51:0c:9f:79:f8:78:33:
                    f5:be:d0:5e:12:0b:1b:5b:ec:79:98:db:01:ae:c3:
                    d7:7e:f2:50:8e:54:b5:e6:05:a1:4b:8c:2b:a5:b2:
                    34:e8:c6:cb:ea:d0:a4:fa:92:33:77:9c:e3:06:7c:
                    7e:d3:a5:41:dc:13:2c:20:64:b9:91:6c:ab:b6:da:
                    e0:fe:0d:68:64:97:5e:c3:4d:06:d8:96:13:44:4e:
                    0f:ef:04:0c:8b:40:36:50:62:8a:34:c8:9b:14:0d:
                    aa:4a:10:35:ae:5a:7e:08:ff:ff:fa:8f:cb:7c:82:
                    3f:39:90:d5:d1:24:b2:1a:a6:c3:d9:58:b9:66:f0:
                    4f:fb:a1:87:d7:4c:97:89:9b:47:89:d4:bb:b1:14:
                    cd:43:73:6e:d4:cd:0b:df:80:6b:b7:e3:1c:15:ee:
                    4e:6a:65:64:cc:c3:09:c0:19:ec:30:e5:3f:79:8c:
                    70:fc:c9:20:a1:f3:96:23:8b:f7:78:a3:7f:6c:58:
                    be:e3:16:41:ff:b0:5f:c5:cc:91:fc:e0:1a:ba:1d:
                    f3:24:9f:d9:3b:fc:c4:9a:1d:49:8e:a8:56:17:e6:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:32:39:8D:8A:EE:1B:EE:9F:EA:4B:32:9C:C3:44:95:5C:CB:3A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:da:11:1f:2c:13:14:6e:2e:0e:03:5a:48:9a:fb:47:02:0f:
         aa:cd:1a:38:3c:ac:70:d9:e8:dd:ec:45:0a:3d:d4:13:7e:38:
         33:55:da:37:bb:b3:c1:2c:f6:eb:10:33:81:6b:aa:67:06:8f:
         67:7d:ca:b1:cf:8e:22:44:ce:b2:bd:30:86:79:c4:d3:0b:be:
         49:4d:d7:f7:90:d5:93:06:a0:12:41:21:31:fa:f0:63:8b:09:
         3a:be:ea:60:31:fb:1a:0e:01:06:bd:db:2d:9d:44:2f:23:54:
         ec:a2:8e:4c:19:02:13:64:4b:2a:f1:e4:5d:ad:f2:84:13:6b:
         a9:71:11:8d:0c:b5:c6:89:a5:f3:a2:80:39:a9:06:00:42:b5:
         68:55:d4:50:7a:e2:ae:87:a6:eb:a1:f4:be:c0:e6:d5:f3:6e:
         34:2c:c9:8c:04:61:65:35:62:db:d7:7a:07:15:73:a8:a4:3b:
         d9:eb:07:97:53:a6:41:e7:2d:f5:30:ba:87:04:31:a8:bd:82:
         f1:bb:a3:f5:97:4f:55:56:77:81:9a:8a:3d:45:fe:a8:7e:a0:
         ed:92:82:bc:d3:29:5e:06:67:bb:b8:64:b2:16:60:02:42:9a:
         2d:03:ee:a2:9b:60:29:c9:74:75:a3:0c:d1:b7:a2:48:8e:25:
         ee:be:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:35 2025 by rpki-client