Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
File:                     c794535d-4f66-3ef7-abd2-35d8f1551d49.roa (raw, json)
Hash identifier:          UMDk5IqomOCowWYASs5DUfQdSp5YjiN69sPP5kEcopo=
Subject key identifier:   62:80:0D:EB:F1:7E:1B:E6:8D:FA:A7:DF:06:0E:A6:4C:14:93:4D:A8
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584AB220CE6E7AB4D4FE8617CE80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     11650
IP address blocks:        2604:2e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ce:6e:7a:b4:d4:fe:86:17:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=44cfe470-0cb6-4b84-974f-d4ed1cf68b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:95:c0:87:19:b3:3c:2c:e3:6c:a5:3c:6d:
                    b4:30:0b:aa:87:df:bf:5d:33:2d:7a:0e:02:f5:17:
                    03:aa:37:69:1e:d3:20:0b:4d:32:f7:12:06:c4:dc:
                    12:75:0f:09:e1:8e:8b:ba:f5:51:c7:66:c2:9b:23:
                    bd:1c:5d:d4:4f:65:85:ae:80:03:e7:53:0e:a2:ce:
                    70:d4:ba:c9:5a:a6:27:4b:62:27:d1:03:e9:ce:9c:
                    98:48:14:80:5b:21:05:76:b3:ce:c8:a9:ef:30:ed:
                    d5:37:e8:79:f6:c5:49:91:df:57:c2:29:80:d8:56:
                    9a:95:e4:27:ec:8e:06:15:b6:e4:2a:23:a9:af:22:
                    6b:53:d7:94:88:52:f8:4d:a0:2f:ad:b2:3d:f2:42:
                    07:c5:68:7d:5d:00:73:3f:21:bf:a7:af:0e:4e:9b:
                    f2:73:64:4b:b3:e8:c4:fe:cd:35:09:2a:cc:3e:ea:
                    5d:4d:99:3f:97:c2:26:87:87:d7:e1:b5:74:d5:91:
                    a9:be:32:db:7f:81:a0:01:d0:0c:81:e6:7c:4e:f8:
                    de:fa:f6:87:66:e0:92:b5:0f:6b:a5:30:25:4c:1d:
                    fa:08:83:63:2f:8f:39:6d:bb:04:2a:34:da:af:e9:
                    a8:e6:d9:88:7a:a3:e9:0d:97:d3:01:65:16:20:d5:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:0D:EB:F1:7E:1B:E6:8D:FA:A7:DF:06:0E:A6:4C:14:93:4D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:4d:a1:27:00:64:e0:f0:fe:ef:c9:77:53:7c:d0:2b:61:
         15:ef:3f:9f:55:83:40:ae:b1:ce:5b:49:c0:56:71:25:a1:74:
         83:41:4e:25:91:51:61:d1:91:78:5a:c6:e7:0b:57:3f:2a:d7:
         a9:48:00:56:3a:e1:f2:81:09:24:0a:5d:bd:bc:4b:65:8d:44:
         aa:16:98:78:19:53:4a:14:f1:62:8e:2f:32:2a:08:99:fb:41:
         fc:27:7e:55:58:c7:21:9e:39:8e:66:b4:49:4b:8a:05:e7:79:
         80:fc:46:87:88:01:39:2b:f7:92:17:93:32:99:61:0e:93:07:
         54:0c:8f:98:a1:d8:05:44:50:14:20:ef:6e:b3:b6:79:37:11:
         ba:71:e4:01:c9:54:05:c1:c1:08:52:85:59:b7:51:9e:f7:6e:
         6c:51:05:66:06:e6:b4:78:70:b2:8d:3f:12:9f:48:2a:a0:6e:
         d5:4a:77:6e:9c:3b:43:49:9d:ba:5d:c7:36:db:2c:e5:f1:cc:
         62:08:4e:68:e2:b3:3c:1c:e3:72:5e:1f:be:db:a2:3b:2d:52:
         39:36:05:8b:46:94:7e:df:3f:d8:d9:f2:31:0c:38:f7:96:05:
         4f:7c:b1:70:58:6c:7d:0b:e4:40:44:9e:f1:b4:6e:12:75:9a:
         34:23:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:19 2025 by rpki-client