Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
File:                     0f107f23-47ba-363f-a704-3d575b31c8a9.roa (raw, json)
Hash identifier:          r06nc/aD+xj3mc9sgLmpo6SLRFBOyMwgVRix2nYOvwM=
Subject key identifier:   0C:E0:85:88:A2:CD:1A:F8:89:DD:73:41:B8:48:F1:B4:71:47:8E:51
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584A2955605ACE696607D2A99600
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     23122
IP address blocks:        2607:f558:800::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:60:5a:ce:69:66:07:d2:a9:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=412b7a2f-5aff-46ad-84ea-09a29611e9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:a5:1e:ed:a8:97:1e:99:6e:99:c0:f3:09:
                    b8:44:08:6a:d0:79:73:1c:96:9f:5d:a1:d0:64:17:
                    b4:d6:67:4d:22:1f:5a:19:c0:cd:ca:f1:c1:28:a2:
                    24:a4:5e:c1:ce:e7:8a:0c:e5:e5:47:f5:3a:a5:55:
                    51:8a:24:15:50:f5:f5:e3:eb:da:43:a2:aa:50:cb:
                    ef:be:e1:25:a3:ab:e9:e5:be:63:57:b6:49:0f:c1:
                    79:fe:c3:93:cb:f9:48:56:26:7e:f5:68:a2:e9:e0:
                    17:95:36:de:74:dc:85:a8:ea:78:8a:e4:5c:9a:b4:
                    05:5e:35:02:1e:60:e6:90:56:19:e1:ec:70:0b:a1:
                    9e:a8:04:ab:e1:e8:59:c0:6e:f7:f6:87:9c:fe:01:
                    d4:b4:4d:b6:9d:f0:54:95:24:70:9a:5e:09:f9:0c:
                    26:10:2e:20:d4:ff:4f:51:ea:fb:32:96:b1:4d:fe:
                    62:e0:7f:55:c2:cd:a2:03:12:66:3e:1f:31:b4:10:
                    63:a4:15:27:d3:78:7c:23:00:d4:11:5a:04:d7:22:
                    0c:a4:04:23:bf:95:9f:73:96:4e:d7:25:11:25:8b:
                    59:af:ca:f6:3c:24:d8:d1:6a:69:f2:6e:61:12:16:
                    38:c1:64:53:c0:73:44:30:2c:cc:ba:c2:3a:e9:e5:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E0:85:88:A2:CD:1A:F8:89:DD:73:41:B8:48:F1:B4:71:47:8E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/0f107f23-47ba-363f-a704-3d575b31c8a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:6d:45:95:26:a0:f1:eb:94:54:28:bb:8a:82:15:41:f5:
         fe:09:96:65:aa:b5:c3:c8:79:32:f4:35:7a:74:96:a2:93:7a:
         e9:f1:86:28:65:c4:9e:55:e9:ce:7a:b0:1a:0a:7d:29:a2:ba:
         37:f7:8d:93:94:71:85:69:22:d0:c8:7f:ff:77:88:9a:07:37:
         7d:92:9b:df:de:60:9a:60:dd:13:05:a7:b0:2a:22:69:8b:e8:
         5a:05:57:fe:12:f8:81:8b:18:1d:6b:9c:e7:d8:20:02:00:45:
         88:28:e5:43:ee:f2:0b:03:35:8e:89:46:f6:76:1b:10:02:fc:
         7c:ef:a5:8d:24:8f:e5:41:30:22:af:1b:78:80:3e:c9:86:fe:
         04:49:ca:09:27:db:7a:ec:f9:73:0a:b4:f7:af:b4:3d:79:8c:
         20:15:30:34:78:28:9b:b4:8c:72:20:a1:e9:23:28:29:5c:37:
         c3:2e:bf:bf:ab:0a:99:bc:6b:65:4c:75:03:e1:e9:fb:ba:74:
         fd:b1:6e:4f:c5:cf:09:45:94:e4:7d:5c:d4:fc:82:ec:cc:43:
         65:b0:f0:a6:47:70:31:1d:4e:6a:23:26:3f:9c:86:1b:04:9c:
         f1:ae:ae:8f:f4:c0:2c:5f:eb:c4:6c:9f:3b:d9:69:54:40:b9:
         74:c6:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:15:01 2025 by rpki-client