Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
File:                     7475f7af-35bc-315c-95d7-5af35bb16110.roa (raw, json)
Hash identifier:          0bFP2PmbOr35pHBigiPj8ZS/aGi/6N19LdaXg5SU8iE=
Subject key identifier:   62:E9:48:44:4B:D8:EF:14:8C:47:FD:82:2C:BC:54:09:FA:38:EF:FC
Certificate issuer:       /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial:       010D0C9F4328584A23C01566F4B464B570E69A80
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        2001:504:27::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:15:66:f4:b4:64:b5:70:e6:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=aa854790-96cd-453d-88aa-5814e402ff11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:3f:d1:8c:28:ba:18:24:c7:0e:94:f5:07:
                    14:5b:5c:d8:fb:b3:49:eb:07:ea:cd:be:fb:c0:de:
                    bd:7b:5f:10:24:89:59:e4:61:46:ad:ff:e3:b7:f2:
                    be:0d:28:cc:4f:e5:5c:f7:4f:32:41:a0:5c:42:93:
                    1c:0a:9e:21:18:0d:f7:35:6a:6d:4c:d7:49:ce:93:
                    d3:eb:bf:54:68:84:f8:f2:f7:cf:c8:e8:14:c4:2b:
                    d7:cf:e4:6d:81:94:8e:91:d7:b8:35:56:dc:96:d8:
                    e2:8c:2f:bc:8d:ab:f5:f9:94:14:fd:43:41:c7:dc:
                    8c:52:a6:ac:81:26:8c:3e:84:34:85:1e:8e:93:d9:
                    c6:60:a6:09:07:e5:64:1a:cc:55:f5:d4:12:e3:cc:
                    21:72:a3:c8:4e:0c:ce:0a:93:5b:61:6f:99:da:b1:
                    7d:2e:7a:38:bc:b5:8d:7f:5f:27:b5:22:76:31:03:
                    49:0b:c8:37:95:e0:aa:38:3a:7d:82:16:73:21:13:
                    9b:9d:c3:64:85:9d:18:52:32:ab:be:9f:a4:3b:77:
                    a5:58:5a:ca:e0:fb:80:c4:f3:1b:ec:bc:2d:38:b9:
                    f2:ef:dc:7e:4b:51:57:65:99:a1:c5:6f:7d:16:ca:
                    73:34:ee:2f:74:79:31:4d:01:ec:fd:9f:5c:47:2d:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:48:44:4B:D8:EF:14:8C:47:FD:82:2C:BC:54:09:FA:38:EF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl

            X509v3 Authority Key Identifier:
                keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:f7:9d:cc:12:43:72:c8:87:9c:ec:a9:f1:b3:0b:0f:9c:
         4a:82:45:de:d1:2f:fe:ef:f0:eb:22:be:cc:c1:cf:9a:86:6d:
         66:9a:e4:91:4c:7e:a6:35:3b:43:2f:42:f6:7c:51:89:a9:fd:
         18:f4:4b:4c:36:b0:6a:09:43:01:cc:c1:a6:ca:3c:c1:cd:a3:
         26:f5:a6:95:d4:c8:1c:99:7d:cc:2e:22:10:93:b4:46:1b:f9:
         7f:13:99:d0:bd:db:da:a3:b0:a6:f0:3d:98:05:4e:cb:9b:36:
         2c:ba:34:67:1a:02:77:fd:8b:e1:b6:5a:29:9a:38:6e:46:a9:
         cd:cd:bf:a4:ec:56:2e:06:2a:83:59:21:ea:b7:8f:b4:f8:9b:
         b7:09:90:35:49:e6:24:34:56:a5:8e:c6:34:67:07:aa:3d:52:
         e4:f1:89:c6:27:41:ba:4d:75:ff:25:c6:0e:d3:dc:2c:f3:13:
         c3:c6:05:0f:df:35:b3:a6:01:3f:1a:75:7f:b7:40:94:26:2d:
         b6:49:f7:81:49:cb:63:30:3d:58:dc:ae:8f:20:02:84:32:96:
         0e:4a:91:2d:1b:67:55:77:4a:95:cb:06:b9:d8:3c:ae:30:90:
         16:f7:a2:5d:42:4d:3b:23:b1:b3:af:e8:1d:92:89:19:29:3a:
         40:0f:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:39:30 2025 by rpki-client