Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/e7ed4a4e-eda7-3374-9445-8b2f75c3529e.roa
File:                     e7ed4a4e-eda7-3374-9445-8b2f75c3529e.roa (raw, json)
Hash identifier:          cK/pt2Tf54UukSv1MVhTO+8cg70Lt+MEZdqmOQOKe6s=
Subject key identifier:   98:CD:1A:14:EF:D9:D1:C1:CA:5B:C4:57:BE:09:01:6D:C1:72:76:A6
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584A9FFBA7B0D9FF2655B3901180
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/e7ed4a4e-eda7-3374-9445-8b2f75c3529e.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     19745
IP address blocks:        2607:5f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a7:b0:d9:ff:26:55:b3:90:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=60c0d340-ed21-415b-9633-1ab3345fff71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:4c:53:18:41:66:44:19:d1:27:7c:1c:55:
                    5b:b3:77:dc:c2:c2:42:2d:e8:16:2f:7f:6b:67:4b:
                    47:73:90:6f:de:26:ec:40:5a:48:92:5b:f6:d9:2a:
                    b6:ad:cc:f4:4e:74:7e:c4:37:9e:99:27:db:6a:f2:
                    bf:e9:aa:5b:43:0e:63:19:71:0f:2a:52:7f:5e:6c:
                    f5:d3:d5:23:11:9d:8c:12:aa:07:0c:23:9d:55:aa:
                    45:4e:00:15:4a:c0:3a:8f:d1:36:28:92:63:60:5d:
                    26:5c:ca:a0:70:33:76:c2:a5:59:67:8d:9b:9d:35:
                    29:4f:10:ae:04:6e:f6:92:cb:df:20:e7:76:44:3a:
                    5d:66:df:2f:1e:c2:81:5f:3f:09:29:23:e4:64:34:
                    b5:d8:6d:22:53:82:00:e2:b1:f9:c6:8d:1a:c1:4d:
                    5d:63:78:67:b1:43:55:47:7d:a1:12:0d:12:4b:fc:
                    55:66:d7:c7:07:1a:55:71:0d:79:29:01:14:60:cc:
                    19:52:7c:47:3d:6d:e3:78:86:68:eb:57:e6:ae:5a:
                    3f:95:b4:fb:54:bf:7d:cd:30:cd:a8:9e:f1:fc:d1:
                    4a:21:73:2f:2a:25:a4:9a:f4:7d:46:16:ca:7c:68:
                    70:87:fc:0a:29:7a:37:c9:26:d6:4f:f2:2e:06:c9:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:1A:14:EF:D9:D1:C1:CA:5B:C4:57:BE:09:01:6D:C1:72:76:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/e7ed4a4e-eda7-3374-9445-8b2f75c3529e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:e5:69:d4:b8:fd:e4:64:d7:b9:23:f9:1c:88:f8:2b:c9:
         b9:4a:19:15:7d:95:23:67:8d:d0:13:50:e0:1a:ae:7c:ce:91:
         78:3c:ef:ce:05:9a:06:0b:ac:94:03:66:31:ea:d1:10:f5:ce:
         da:67:6a:31:e1:bc:55:a8:ca:ab:70:f4:81:e1:7e:9b:d1:94:
         6d:4f:d9:dc:dd:c6:51:a0:a6:48:cc:b6:02:06:ed:a1:ef:75:
         49:e9:c7:c0:8e:c7:8d:52:d2:27:13:30:95:54:db:81:68:f0:
         2e:1f:0e:f1:36:86:57:d2:75:26:ed:fc:4f:d5:b2:49:06:0c:
         d1:f1:61:76:f4:87:73:cb:7a:14:a8:b9:0b:8f:bc:55:91:d0:
         b0:bd:74:cb:cc:60:1e:91:a9:35:a6:28:43:9e:31:88:e4:8e:
         00:d3:8b:f2:99:ad:ab:b0:ba:ee:bf:af:f1:1b:e4:80:47:6f:
         3e:7a:e3:e2:c6:35:df:33:95:cd:79:5b:a7:e3:b7:97:7f:f6:
         eb:c4:72:ef:9a:96:86:89:77:75:24:de:30:5b:ea:18:50:8c:
         1e:7e:48:20:cb:2b:a4:12:3e:21:f2:d1:c7:54:2f:b9:33:c6:
         98:55:08:87:39:c9:76:29:95:85:35:90:31:ef:b3:2d:f5:d6:
         3c:58:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:19:56 2025 by rpki-client