Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
File:                     01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa (raw, json)
Hash identifier:          hhWBNiDij7f3lcTcEM3K5xpBtqq4xQuPBKYroT2tkTs=
Subject key identifier:   C1:F8:E6:D5:1D:5B:0D:1E:10:F5:3E:22:7D:E0:46:16:04:1D:46:B9
Certificate issuer:       /CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Certificate serial:       010D0C9F4328584AAB2654F8D43F2339A6BD8840
Authority key identifier: FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3807
IP address blocks:        2620:104:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:54:f8:d4:3f:23:39:a6:bd:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=f559149b-948f-430c-b0a5-54cfb7cdabcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:7a:68:1e:6c:31:ea:a4:ea:a3:89:f7:00:
                    44:ca:99:68:5b:9d:ee:48:55:29:92:d4:51:fa:9b:
                    77:d0:0e:ed:6c:d4:55:2d:7a:2c:38:44:dc:b7:a3:
                    a2:6a:25:50:b6:52:69:5c:d1:da:ee:a5:14:dd:ca:
                    a5:47:d1:1a:84:6f:09:3d:e6:74:84:18:9e:fe:8a:
                    ca:56:93:34:bb:bb:6a:ab:56:e2:6a:88:c8:4a:7a:
                    74:16:63:52:e8:48:d6:18:12:38:38:2a:62:3f:fa:
                    aa:02:f0:11:9a:d5:72:91:d7:0a:42:c7:09:9c:1a:
                    d6:5a:fc:df:4a:9b:66:dc:b6:b8:c3:65:10:df:a6:
                    ec:ec:f3:1f:c0:c2:1a:15:fa:86:b7:bb:ab:e7:68:
                    c8:cb:19:9f:94:8f:1c:75:3d:df:8d:d2:d1:6d:dc:
                    f8:fd:2b:06:84:b5:17:b9:af:34:31:0e:3a:92:1a:
                    bc:91:60:6d:f9:01:46:7b:9b:80:6b:e5:bb:4a:cf:
                    21:56:63:47:7b:d7:18:ec:f4:28:5f:05:de:0d:0b:
                    0d:e1:48:c6:ea:0e:af:05:28:e7:1a:9f:5f:af:a5:
                    c8:96:b3:f2:76:fd:bc:10:12:7a:90:e6:8d:c2:41:
                    24:14:2a:a8:52:70:4e:40:87:31:e9:d7:a0:44:45:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F8:E6:D5:1D:5B:0D:1E:10:F5:3E:22:7D:E0:46:16:04:1D:46:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl

            X509v3 Authority Key Identifier:
                keyid:FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:21:ee:89:18:05:f0:43:78:1d:a7:cd:a3:11:af:45:8d:
         96:d8:17:1a:22:91:10:1c:fc:da:fd:d7:74:4c:98:b0:d8:54:
         5e:84:38:bb:a1:c0:c1:71:01:3d:d4:0f:6e:c9:69:7c:6f:ae:
         e2:dc:12:e7:0e:41:b3:bb:78:20:e8:8a:4a:6a:e2:e5:08:7e:
         40:72:36:59:ac:4c:8e:90:06:56:51:8a:5d:aa:eb:3c:89:85:
         d5:06:a1:1f:7f:4e:9b:bf:fc:50:42:40:65:97:e1:c6:6c:f6:
         f2:06:a8:3e:a7:b9:a1:29:ca:7b:23:45:0d:25:05:e4:ce:c1:
         c5:3e:f8:25:92:2b:a7:c1:a8:00:c7:4f:49:14:97:09:cd:82:
         b0:cc:b4:c5:0c:46:c8:85:72:51:30:0f:54:bf:d8:51:51:30:
         11:86:b2:82:5a:9d:63:a8:30:e5:95:f5:93:6f:92:0e:a5:79:
         43:61:62:1f:a1:ff:f2:d6:4d:3c:87:76:27:c2:1c:f5:85:89:
         de:6c:ed:a1:7d:b5:d2:10:3d:ed:80:97:66:d4:5b:97:4c:09:
         9c:f6:96:0d:38:98:63:9c:75:ba:ce:b4:c2:0c:d0:cf:42:dc:
         11:c2:51:b4:01:1e:50:89:dd:7a:ad:cc:48:61:6d:fd:93:79:
         36:30:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:09 2025 by rpki-client