Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
File:                     30d374fc-486d-372b-9c83-8a66ef0b4926.roa (raw, json)
Hash identifier:          CP5hn6soSjVatuax82PXcn9wVz5xF9K+6PEOivRyayw=
Subject key identifier:   C1:14:F1:87:61:41:79:BF:3F:AB:91:33:0F:E2:F1:74:69:66:63:0B
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F4328584A6C55E0A0AA71CA3F9C4B7400
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     395261
IP address blocks:        2607:4980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e0:a0:aa:71:ca:3f:9c:4b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=d347090e-2730-4252-b072-6224819f9eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:2b:5a:7a:b4:4d:d8:a0:a8:eb:ff:ac:78:
                    6e:34:98:da:56:cd:61:51:f3:78:b0:f1:36:e8:70:
                    8c:13:4c:f0:92:db:8a:e4:e1:5f:26:0b:d5:5b:cd:
                    c4:f8:89:d2:35:8e:8c:4b:e8:7d:7c:fd:17:7d:14:
                    31:67:f3:f5:ab:09:9f:94:82:8a:b4:41:3a:8e:70:
                    2b:e0:42:38:37:c1:9a:2a:af:ce:f0:b9:a5:d2:9e:
                    31:11:9c:c4:34:33:49:78:9a:8b:52:f3:77:2d:b2:
                    ab:e8:d4:78:ea:a4:b4:04:dc:05:b3:ac:de:1f:75:
                    58:2c:dc:4b:02:fb:50:a9:2d:6b:dd:bb:7e:7b:bb:
                    37:e5:85:6b:1f:bb:d7:ad:8a:54:b2:64:0c:81:7c:
                    54:67:a9:63:a3:86:81:3e:7f:a2:53:7a:51:2e:80:
                    c2:d2:95:10:3f:e8:75:e0:56:f3:bb:5a:ab:57:70:
                    dc:8b:f4:0f:18:83:17:01:b2:65:96:8f:31:1e:e1:
                    fa:e7:d1:a7:10:65:38:a6:ca:29:d4:2b:55:0a:de:
                    70:33:38:59:6d:02:35:9c:33:4c:44:1b:3b:22:2c:
                    07:89:b7:0c:c3:ce:69:d0:a3:1c:11:24:78:0b:1b:
                    84:19:7d:95:45:e6:41:80:da:81:a2:e0:18:96:06:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:F1:87:61:41:79:BF:3F:AB:91:33:0F:E2:F1:74:69:66:63:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:62:89:dc:15:ec:17:35:6a:ae:3d:43:6c:2c:db:44:69:
         16:95:52:94:cc:81:ff:46:30:78:79:0c:2a:3c:11:f7:7f:bb:
         01:75:75:d7:7c:c5:06:05:a6:d0:04:c1:cd:14:01:50:50:6a:
         61:35:36:ba:fd:b6:1e:54:0a:c4:86:b1:6d:fc:02:03:f6:b8:
         e8:73:00:83:25:fe:e9:64:1e:e4:de:c4:ac:98:3b:c5:b2:74:
         3f:ac:77:9f:ee:89:8c:ae:35:cb:99:6a:8b:11:1c:96:5a:c7:
         5d:9c:8b:9d:1b:60:d3:98:f1:0a:84:50:23:9a:78:26:13:ec:
         a9:b4:a6:86:77:15:4d:ab:24:a3:d0:08:4e:87:c2:c2:28:88:
         18:6a:bb:e0:ff:8e:ee:97:b5:2e:70:5d:1e:61:fd:36:c7:24:
         df:4d:33:7a:f0:bd:a3:f6:c3:96:53:b3:1f:a7:07:30:99:95:
         bf:cf:97:7c:7e:26:22:be:16:27:cb:c3:a3:35:22:05:94:d1:
         81:75:e1:da:25:a7:da:37:ab:10:94:94:a1:20:24:8a:20:57:
         1f:2f:3b:b2:f4:fe:24:2a:e4:c1:31:07:af:de:09:f2:62:89:
         fd:5f:e0:c3:87:d4:48:3e:e4:49:25:1e:fc:74:05:19:66:23:
         ed:3a:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:25:48 2025 by rpki-client