Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa
File:                     281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa (raw, json)
Hash identifier:          yDaykvkuV7XFLMrNButZxJoR48wmNvk/8I3wdtvTA54=
Subject key identifier:   0A:44:61:56:47:EC:F9:DC:25:B1:63:CD:DF:E8:0E:91:EE:29:41:76
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A62907EC5EA7BF38A50966AC0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        2604:5500:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:7e:c5:ea:7b:f3:8a:50:96:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f8cb9600-23b2-488d-a471-85ce436f6060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:75:a8:2b:23:ca:bb:3a:63:1c:5a:f5:94:
                    e9:62:9a:b5:73:9e:4a:9c:1a:0b:43:a1:3f:c4:bc:
                    95:1b:cd:b7:51:d8:50:09:92:53:a7:78:0e:75:13:
                    87:64:27:70:53:11:3f:a8:4e:3d:aa:74:6a:1b:b5:
                    11:c1:15:e3:16:56:0e:77:32:3e:2d:e2:4b:1c:43:
                    67:0b:f3:bd:f6:a7:76:fa:1d:a3:6b:0c:49:fc:75:
                    d3:ac:65:5f:6d:c7:f8:a8:76:04:54:45:3a:1d:14:
                    63:fd:d7:11:34:ba:1a:ef:c8:30:6d:ec:48:09:b0:
                    fd:18:de:29:39:26:37:11:54:64:b9:17:e2:ee:89:
                    3b:be:c5:ee:c5:bd:03:18:30:c8:d1:ed:ca:9d:1c:
                    f9:21:53:62:45:04:b9:f1:4a:2a:a1:7a:e2:ad:81:
                    a4:83:10:75:9d:c7:ab:89:e5:2e:1a:d1:a6:e9:60:
                    18:60:2b:92:00:bf:a2:79:4d:5d:9d:6e:48:1c:7d:
                    a7:f9:d7:c1:32:ee:9f:6b:45:ec:a9:8f:39:30:e3:
                    48:77:ca:19:72:52:5a:c4:fc:09:26:66:ed:e6:41:
                    f8:25:4b:c9:6c:0c:ee:06:a8:58:7c:fa:dd:e5:c1:
                    f2:50:68:91:c0:32:d9:0b:8b:3c:14:89:03:73:ae:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:44:61:56:47:EC:F9:DC:25:B1:63:CD:DF:E8:0E:91:EE:29:41:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:86:91:49:31:2f:3e:29:1a:1a:18:c9:f0:c1:b7:45:b6:
         b8:d3:a5:56:02:49:d8:bc:50:8a:da:38:51:de:76:2f:0a:97:
         40:e7:74:1a:ed:29:51:50:85:5e:83:b8:cb:da:44:81:16:49:
         78:17:d1:32:e4:c7:db:65:4c:18:33:aa:07:c6:2a:69:1c:4b:
         bf:9c:ec:41:11:b7:49:8d:7b:eb:f4:8e:bf:27:6d:7a:28:eb:
         5c:b5:8f:26:ba:3a:83:aa:41:3b:7e:12:2e:17:50:73:c2:3e:
         04:1e:e0:16:f8:a0:44:71:8d:95:bf:24:49:ea:d7:ce:f8:f4:
         40:04:af:fb:f2:6e:f8:86:a1:21:60:53:10:ee:69:7e:15:36:
         ae:7e:c3:dd:c0:0b:eb:20:99:78:60:63:6a:81:ab:53:29:f7:
         72:40:13:6f:d7:0c:f1:d1:42:37:10:0f:92:a5:03:a9:bf:50:
         cf:0b:78:b6:64:4f:d6:4a:d0:d2:f7:bc:47:24:66:18:c2:5d:
         bf:c4:80:dc:c9:12:1f:bc:00:6b:22:94:a7:5c:ee:63:0b:ee:
         4a:35:96:b3:cf:42:5e:4c:a8:8f:cf:63:39:28:12:57:c0:53:
         8a:73:1c:b5:ae:ee:20:24:ed:f5:6a:10:2e:54:24:de:d8:40:
         16:e2:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:21 2025 by rpki-client