Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
File:                     e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa (raw, json)
Hash identifier:          ehqPnzJJ3uAWmQxYiA013F2R/d50WVlVU4S30XIpINE=
Subject key identifier:   6E:EC:16:E1:FA:FB:25:83:8B:B8:25:B0:7B:3E:3D:DD:2F:82:DB:56
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F4328584A6DBB411B7E09AFDF2F8F9700
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     210527
IP address blocks:        2606:7540:f010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:41:1b:7e:09:af:df:2f:8f:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=1dbba0ee-ee3c-4db0-a7cb-a5975cd23832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:42:38:99:b4:49:87:09:3b:bc:26:0f:06:
                    a4:c4:54:bd:ea:d8:40:c6:d7:1e:cd:56:a2:40:f5:
                    5c:9c:ee:0b:ce:74:73:da:24:bd:20:ea:00:45:79:
                    bb:ed:e3:3c:aa:3f:54:5b:ae:16:ca:00:17:37:23:
                    03:35:14:b1:4d:7a:48:39:a6:c1:60:82:68:9f:63:
                    76:39:33:51:4e:eb:22:30:2b:30:e4:fd:19:d7:a4:
                    0a:ac:bf:8c:a6:9c:43:ce:bf:d1:39:b7:2c:c6:10:
                    2f:fc:bc:09:d6:32:56:b6:c0:51:a6:64:42:73:9f:
                    46:f9:e0:b2:76:36:84:be:c8:46:4c:bf:6d:87:5d:
                    83:5d:99:7d:ee:ca:ea:52:60:5c:cd:ae:64:79:43:
                    23:d8:0a:e5:a8:75:6a:46:49:99:5e:3a:80:65:eb:
                    bf:2b:94:2e:ab:14:17:58:81:cf:1d:38:31:ea:0b:
                    ce:d9:9f:aa:83:5f:b6:3d:d4:ab:0b:23:70:85:28:
                    cc:c0:72:31:74:67:80:86:77:0d:0d:70:49:bf:bb:
                    aa:f5:ba:93:d9:85:c5:ab:ab:5c:e7:d5:7f:13:e7:
                    18:7e:6f:d9:5a:57:e5:26:a0:b0:db:d9:b3:61:bc:
                    a6:0c:77:3f:1f:50:03:bd:d5:33:e5:53:50:46:88:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:16:E1:FA:FB:25:83:8B:B8:25:B0:7B:3E:3D:DD:2F:82:DB:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7540:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:c6:50:37:16:9f:00:b8:8b:e2:1f:dc:e4:df:97:1c:42:
         e9:ad:c6:49:d7:3a:33:d5:c9:72:e0:69:d7:86:fb:4c:1d:cf:
         1d:fa:f5:a0:c7:be:82:dc:74:06:42:75:9c:6a:25:78:42:6f:
         f4:78:4d:fc:b5:12:10:d6:57:e1:43:a2:9f:58:4d:49:68:0f:
         bb:c1:1f:78:fa:bd:05:97:17:9d:07:2e:08:5b:97:3d:e0:0d:
         73:c8:41:94:0a:06:b0:92:5b:26:79:37:b9:d0:25:5e:92:ec:
         f1:2b:d5:9f:e9:96:dc:2c:c2:51:bc:72:c5:ff:03:b4:8d:0b:
         9c:62:92:cb:b9:f3:08:1a:5f:b4:f9:b6:df:d1:97:8b:a3:ba:
         0a:19:88:35:33:a5:92:60:b8:63:a1:45:24:1e:a5:81:4d:31:
         bb:bc:36:08:dc:34:0d:c9:fd:1b:26:b3:90:9d:1c:b9:15:b0:
         92:2c:49:3a:73:a4:49:53:ab:2b:00:0d:5c:81:d3:b8:09:32:
         1b:d0:86:5f:98:fd:f3:81:e5:a7:b8:1a:41:9a:0c:a6:68:4e:
         04:08:a5:e4:e2:a3:50:a2:ec:10:78:41:2f:a2:4a:8c:93:c0:
         6a:2e:6a:8c:81:f2:ce:f4:5e:d3:5c:ba:76:ba:b7:43:96:0a:
         12:f0:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:23 2025 by rpki-client