Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
File:                     255c5618-6afd-3842-8da1-db637de34c26.roa (raw, json)
Hash identifier:          kvXtcQEXsGVoVbKLlvqG47/GvlTmIuxGWCjYBpTrxwY=
Subject key identifier:   E2:9A:D8:2A:D7:E8:C6:BA:3A:BC:BC:D4:16:07:1E:BA:21:01:C4:9E
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584A119AB604A958FE5244D98B00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     27317
IP address blocks:        2607:9f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b6:04:a9:58:fe:52:44:d9:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=6303362f-0edd-404e-9e6b-5d98032b93c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:c6:9a:17:03:d6:6f:d6:9c:1b:39:08:04:
                    d9:58:51:7a:b6:2b:18:9c:31:78:f1:ec:86:7e:cd:
                    c5:4e:b1:9a:69:af:ba:70:fa:3c:41:0b:65:b4:44:
                    92:63:53:ca:c5:4f:82:92:97:e5:d7:3f:54:d1:e4:
                    49:19:57:0d:14:e4:11:2e:0a:c6:69:b8:d0:45:19:
                    6c:f4:6a:1e:9d:62:f3:18:0c:30:39:2a:f7:81:7d:
                    b0:ca:cb:4b:b0:7e:7e:72:e7:f1:ed:c5:05:8d:66:
                    bb:f5:7e:0e:4e:23:5d:22:dc:60:a0:15:91:e7:e3:
                    25:da:a3:b4:a9:a6:8b:4c:eb:3f:4e:3f:9f:0e:e9:
                    46:aa:18:06:d1:19:51:05:b4:69:8d:ad:1f:c1:c9:
                    ec:9a:3d:f0:6a:e2:8a:ec:f1:3d:c8:1a:93:7c:98:
                    8f:06:4d:e5:28:e6:b4:6f:d3:6e:06:d9:57:0e:dc:
                    ad:66:a3:3a:d9:ee:2e:ae:86:8d:fc:c6:df:4a:9a:
                    6a:38:41:a5:9d:d3:e6:76:e1:62:cf:c4:ab:78:a2:
                    f7:ae:77:c6:a5:ca:92:92:6e:3b:21:cb:00:e3:01:
                    ff:0e:d5:ab:6c:da:08:b6:18:d7:b2:f4:5f:62:23:
                    04:5d:13:02:f0:3c:bd:74:1b:c9:46:7d:07:5a:d8:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:D8:2A:D7:E8:C6:BA:3A:BC:BC:D4:16:07:1E:BA:21:01:C4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:99:2b:73:ca:de:9a:f0:60:84:4f:b0:69:5c:52:c6:55:
         4e:e3:2d:19:46:3a:0f:83:1f:93:90:cf:b0:ff:01:94:60:02:
         db:11:ac:6e:b6:5f:72:01:2f:c1:9a:b7:12:db:1e:cc:a3:e2:
         10:77:a3:20:e2:b2:98:ae:e1:62:03:72:b7:3b:60:eb:9d:aa:
         9a:74:66:72:95:0c:22:94:ec:80:37:7f:75:19:66:96:a5:13:
         a5:0b:a3:7e:08:cf:dc:94:41:16:08:8a:ac:37:d0:61:79:5e:
         46:b7:5c:c5:43:e7:71:db:dd:d5:bb:c6:01:29:ae:60:51:98:
         0a:81:fc:5b:eb:02:f4:10:8c:ec:27:9c:d5:cb:ef:59:db:cc:
         85:97:48:0b:09:5a:44:95:cc:4c:21:22:a1:59:88:1e:2c:49:
         a3:93:0c:74:7c:58:35:24:57:de:13:dc:3f:50:87:ea:9c:5e:
         ac:cd:7d:33:18:03:40:6d:56:de:9c:77:a3:11:cf:e7:61:f9:
         5e:d9:e0:99:30:9e:98:e5:e5:68:54:af:4a:c1:b2:de:de:1e:
         53:c0:47:61:82:4f:a4:13:0c:4d:0a:b3:cb:7c:5e:a3:dc:07:
         b5:69:dc:2a:67:f1:98:73:89:fd:a1:49:24:ce:cd:5c:2a:ad:
         7c:3b:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:48:58 2025 by rpki-client