Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
File:                     368846e3-400c-37dc-a43c-72e0ba5ecb98.roa (raw, json)
Hash identifier:          A/qBT36svd29bFSrijPqJ5uH7ciNOpGDoUyfIsS0S9o=
Subject key identifier:   21:25:66:9D:BC:D8:3C:B7:F9:68:C3:30:85:C6:BB:8E:44:E2:A1:44
Certificate issuer:       /CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
Certificate serial:       010D0C9F4328584A77808CE8CDA0D0589E0F9E40
Authority key identifier: 5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     398317
IP address blocks:        2607:5b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8c:e8:cd:a0:d0:58:9e:0f:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=624ff796-0696-4428-82d7-e49803905154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:0d:1b:c5:ce:f4:e0:11:8b:9f:e6:6d:cc:
                    0f:dd:20:f9:cd:ea:cb:fc:83:93:e6:6b:1e:30:d8:
                    7e:ea:5f:0d:76:0e:da:7f:49:35:64:f3:6c:8b:f3:
                    e7:26:c6:ae:ff:02:b3:c1:33:7f:3a:6b:51:48:15:
                    63:1d:09:ef:36:f8:b0:40:66:b4:78:73:00:25:54:
                    7e:e2:48:14:86:ce:f4:ff:72:fa:6b:03:1c:c2:84:
                    03:56:b6:07:7f:58:95:4e:65:2a:81:22:82:f9:75:
                    b7:60:9c:db:35:65:f7:77:5e:58:65:f2:b5:87:60:
                    37:b3:50:e9:cd:07:68:c6:d5:9a:4f:57:7f:79:4d:
                    0c:8b:e3:e7:23:84:72:b8:b3:0c:d7:17:3d:8b:05:
                    f1:7d:cf:d4:67:0e:6c:a5:7f:cd:6c:50:14:33:73:
                    71:4a:3c:01:50:90:b0:fe:0c:36:f5:7b:27:91:2c:
                    e3:3e:d4:54:14:ec:9f:3a:a0:89:3a:2f:3d:ca:b6:
                    e7:94:ae:ae:06:ab:d0:1c:7e:35:a3:53:b7:4b:d7:
                    7c:7e:97:e1:18:f7:92:0c:3d:d8:70:33:ed:ba:16:
                    d1:25:77:29:60:b6:6a:77:0f:10:37:9c:23:a0:eb:
                    b7:6e:a1:2c:aa:2d:82:4b:ee:5c:dd:67:a3:cd:fb:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:25:66:9D:BC:D8:3C:B7:F9:68:C3:30:85:C6:BB:8E:44:E2:A1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl

            X509v3 Authority Key Identifier:
                keyid:5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:b6:ce:c1:7c:de:4b:6b:0d:05:37:a0:0d:17:7c:34:50:
         4d:fe:cc:2a:de:72:b4:32:af:0f:1b:ed:cc:5f:5e:a1:a8:63:
         09:31:94:d4:d1:42:45:89:49:ed:e9:ee:ea:d2:f1:c7:1a:82:
         9a:fb:bc:e4:28:97:69:5e:ee:19:4f:b1:4b:05:0d:6e:f8:a8:
         0e:99:f1:4a:93:a3:95:e3:4b:7f:59:5a:95:22:59:4e:84:dc:
         4e:2f:5a:1c:25:80:80:34:92:29:f6:4d:b1:e7:64:8c:1b:13:
         16:aa:c8:e0:99:96:3f:31:47:cb:2b:d3:bd:88:2b:a6:38:91:
         92:03:64:d8:3d:4d:24:90:99:e3:54:10:22:34:d3:ce:f9:ea:
         3b:e8:ae:3b:0a:7b:d5:24:52:af:99:7a:f6:4e:75:83:63:87:
         a4:cf:68:da:33:7c:8e:15:2b:22:ab:e4:71:a6:f4:7e:72:b3:
         bd:ec:e1:64:81:98:f4:c0:86:fe:15:f8:e7:40:43:ec:3c:2d:
         47:e5:3e:e8:0a:a1:82:c2:65:2b:7e:95:ca:59:77:99:31:f4:
         66:04:d2:ef:7b:b7:b4:60:46:a1:bd:1d:f2:7f:a5:d7:61:1d:
         22:60:5c:56:6e:db:db:a8:40:98:ca:85:d9:7f:15:ae:c4:6f:
         cf:88:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:30 2025 by rpki-client