Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa
File:                     507862dc-7927-305d-a2df-47d0ca20e4a6.roa (raw, json)
Hash identifier:          p/8e7Kh51XG1gUip93VhQQNeV+IXSqVTOrtRW6nu5PU=
Subject key identifier:   09:46:E8:03:4D:43:8D:00:6C:1F:B8:E6:1F:CC:1F:2A:31:99:82:D8
Certificate issuer:       /CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
Certificate serial:       010D0C9F4328584ABEB0D847726DDD62C71C1700
Authority key identifier: B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     55285
IP address blocks:        2607:e0c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d8:47:72:6d:dd:62:c7:1c:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=038b7fdb-2a72-4cb6-9d49-9a186832f774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:fe:05:77:33:d2:98:12:88:61:ff:31:a8:
                    d4:dc:ae:c2:34:45:ff:76:5d:a3:3d:9b:bc:9d:29:
                    2d:92:3b:a6:d0:3f:1b:81:05:66:2a:7a:78:f1:31:
                    e6:c1:55:78:cf:70:e2:58:7a:98:c8:a2:53:91:6b:
                    2f:05:fb:ee:cc:9b:ae:7e:4e:32:85:81:ff:2d:8c:
                    9d:bc:d1:e9:36:ee:a6:39:df:3d:65:fb:f7:a6:b7:
                    9b:e9:c9:41:91:67:77:09:a9:6f:3a:ea:a8:ea:9d:
                    10:47:28:c6:00:d6:8d:14:37:a6:90:07:cd:6b:4e:
                    25:b7:e2:2f:48:24:b9:f8:8e:91:67:f3:65:50:47:
                    56:42:a5:9f:a4:30:8f:2f:34:e7:0e:d8:37:28:d5:
                    ac:20:10:8d:49:8f:a3:70:bb:f1:35:45:d7:6c:0f:
                    1e:86:8e:da:4d:63:8f:e8:0c:73:23:1b:4e:46:15:
                    bc:9d:01:51:2d:94:e7:ef:b1:13:20:b2:ed:f0:f7:
                    68:1d:d5:c7:31:e0:b1:ed:b2:f1:4c:73:04:5f:fb:
                    f3:20:3b:cf:67:93:97:3b:b2:7a:15:cb:d4:b9:f0:
                    98:87:4b:f4:37:fc:6d:89:fe:29:ae:f9:25:ac:b7:
                    ab:cb:e1:70:89:5b:b5:bb:82:b2:82:bb:14:ff:bd:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:46:E8:03:4D:43:8D:00:6C:1F:B8:E6:1F:CC:1F:2A:31:99:82:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/507862dc-7927-305d-a2df-47d0ca20e4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ce:d0:41:22:da:84:29:f2:3f:d6:0b:9e:87:c9:f2:cb:4d:
         64:e9:90:4a:41:da:09:99:04:b3:8f:ad:55:e6:e5:33:44:75:
         25:2a:c7:8d:98:73:5e:95:94:0c:51:cc:b2:3c:fe:9b:fb:3b:
         d2:d2:0f:52:f3:2e:3c:d4:b0:24:07:e5:58:64:96:22:15:16:
         ef:9c:13:bf:c3:12:2a:00:3a:c1:ae:95:8f:36:16:9c:a6:91:
         43:f5:58:ad:12:af:99:17:7b:0f:ee:35:01:03:c3:bf:5e:02:
         19:4a:45:70:ca:66:0c:87:24:d7:7d:62:84:96:63:46:61:f0:
         7c:5a:6a:93:93:40:9e:9c:1d:16:01:48:18:f6:bc:69:f1:09:
         14:2f:1d:ef:08:e9:43:42:1e:56:48:d7:b7:a0:ed:c8:99:2c:
         19:07:45:48:9e:e3:1a:a3:b4:2a:e8:d1:3b:01:7c:72:27:be:
         86:f2:65:5c:29:51:a1:32:8d:43:b7:59:70:ba:20:3f:e2:ca:
         d4:3f:c6:62:a7:5c:e8:6b:2f:45:9a:9e:01:ab:9b:e6:c3:ea:
         b2:b3:a8:5c:fd:16:f3:89:09:a8:42:a0:3d:b4:af:4a:de:00:
         96:96:09:6f:44:fe:1f:ab:d2:da:36:7e:cc:88:56:e1:f1:86:
         b2:f6:ca:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:14 2025 by rpki-client