Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
File:                     a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa (raw, json)
Hash identifier:          6zVQVdTRnloa5j2x6HIJD6cckoWdpDmx7JvS2S2cVAo=
Subject key identifier:   C8:E0:66:FC:46:2B:68:E8:EA:69:0D:0C:1D:A3:93:E2:17:92:89:E5
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A6290D02C4DCAFD0F723ABB00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        2604:5500:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d0:2c:4d:ca:fd:0f:72:3a:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=65466d18-9781-4ce4-a1e5-03267d9a4bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:c7:63:38:1f:df:a9:b9:61:3f:1e:97:e1:
                    7c:5b:a7:63:a7:ce:7d:89:e9:f9:5a:9c:f5:72:3a:
                    a5:9d:5b:ed:df:61:2f:71:37:33:75:e7:b0:aa:88:
                    54:ed:e8:81:5d:60:eb:7a:06:ae:21:4c:cf:f3:2a:
                    1e:3b:9d:11:d5:5a:1c:2c:45:20:9f:ee:56:b2:f1:
                    7f:6b:12:b4:24:b5:0a:a8:4e:c3:50:b9:a5:24:b3:
                    21:d1:a6:5d:c3:61:cf:2d:5b:3e:cf:3e:19:3a:27:
                    18:77:15:d3:17:ac:b0:ea:0a:ac:be:99:66:8b:2d:
                    40:d6:16:0b:f0:df:c8:26:88:8e:bd:fa:2b:ec:fc:
                    2b:6c:c9:f9:7b:28:00:4c:80:c3:71:a2:ef:f1:80:
                    5b:3c:1f:4c:11:c7:b4:32:83:cb:a2:99:ad:d5:08:
                    55:8e:08:51:08:3b:51:76:eb:fd:65:96:27:69:cc:
                    2c:48:8f:29:12:71:a3:5d:92:7b:47:0a:a2:8f:6e:
                    2a:11:8d:2f:7e:71:6d:e6:83:1a:1b:84:5e:37:1a:
                    0f:ed:6c:2d:56:3b:39:f6:67:0e:4a:da:a9:4b:ff:
                    f5:ac:35:25:fc:29:f2:9e:f2:83:20:89:c6:95:43:
                    72:e6:de:8c:41:30:c4:02:6d:d2:e2:1d:77:7b:f9:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:66:FC:46:2B:68:E8:EA:69:0D:0C:1D:A3:93:E2:17:92:89:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:fa:0c:06:d6:b1:16:7b:d5:2b:8d:6f:1e:b2:3f:0e:fb:
         dd:9b:b7:01:d9:77:e8:2a:6f:04:ac:89:6c:6d:59:26:be:06:
         38:9e:59:69:a5:22:3d:7a:07:bc:d5:b1:ae:92:b8:c4:cb:c9:
         00:a2:b1:7a:28:88:1b:83:df:32:de:68:29:f7:2e:1d:a2:12:
         73:2d:8e:76:ed:60:b0:18:2d:37:23:66:d4:8b:7f:d3:20:18:
         17:e7:b3:75:8f:ca:6a:55:43:00:ac:ae:8b:3a:14:fd:71:95:
         cc:f3:97:8c:c9:6e:f7:f0:15:76:b3:1c:2a:cc:ca:a4:06:ae:
         07:a0:44:8e:fa:ae:1d:e6:bd:59:42:2c:c0:84:22:0f:95:cc:
         53:b2:36:a7:25:f5:9f:7d:21:77:80:09:db:c0:5e:f8:51:d8:
         cc:9f:8e:ac:ed:84:86:45:85:91:98:78:65:63:80:6f:60:cb:
         78:b8:75:28:1c:95:05:24:8e:3c:7e:64:41:ff:d3:33:49:3a:
         86:3e:04:a6:7e:72:43:47:be:15:c1:7d:d6:01:b1:40:b4:b0:
         68:1b:6e:c5:15:88:c6:d1:4f:24:7e:98:96:49:eb:51:79:a8:
         b3:e4:d2:a9:8d:f6:13:c1:9b:41:68:44:72:73:5f:81:8b:49:
         e5:ab:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:45 2025 by rpki-client