Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa
File:                     ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa (raw, json)
Hash identifier:          w48rI1l8a/yBM5cwMxihUiOA963sceDCZCdUDB2FAtw=
Subject key identifier:   57:41:BF:8F:56:3F:8F:26:6E:21:C2:77:48:04:F2:39:51:29:48:25
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584A8B0B75D9091D38D629A05E00
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     396422
IP address blocks:        2606:7fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:75:d9:09:1d:38:d6:29:a0:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=f08d78af-a2ba-4669-b87d-a5c3d7f3e982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:2d:2b:9b:3e:f0:cb:8e:ad:ca:b6:42:c4:
                    8e:47:d5:03:7a:55:e1:b7:77:2e:4d:3c:01:23:9e:
                    77:87:6e:6b:32:ef:ca:b3:17:de:e9:ec:13:52:3b:
                    c1:06:71:31:cc:c6:66:03:5b:b4:6b:72:e0:95:dd:
                    c8:ca:12:8d:13:b2:e7:04:46:6b:6e:fb:d4:77:67:
                    67:c1:82:fa:99:ab:e2:f1:99:cb:c9:d2:f0:19:ef:
                    97:48:a0:78:c6:8a:49:5d:05:04:69:c7:12:5e:61:
                    5f:32:91:2d:b0:5f:75:6a:9a:8f:2e:52:a9:2e:87:
                    e6:1f:0d:6b:a5:0c:06:4a:1b:1d:d7:1c:65:ba:4e:
                    0a:ad:56:a3:3e:6e:dc:3c:7b:65:8b:2f:8e:e1:4a:
                    08:09:04:4b:77:8b:91:15:09:8c:b1:fd:64:a8:b0:
                    f2:ba:50:44:0d:15:14:1c:15:ca:42:ef:60:ef:30:
                    ce:be:e1:74:6c:84:38:ef:a1:aa:dc:cb:bd:23:bb:
                    ae:95:c6:e7:c9:50:68:4d:fa:fb:59:4f:c7:8d:d0:
                    09:b6:be:38:e6:d4:eb:0b:1c:b1:79:0d:60:3a:98:
                    59:b8:64:c4:76:05:54:20:0e:d4:39:bd:16:d2:fa:
                    8e:89:e9:0f:64:ad:4d:e4:53:04:c0:66:49:7b:24:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:41:BF:8F:56:3F:8F:26:6E:21:C2:77:48:04:F2:39:51:29:48:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:f7:bd:5b:d3:bc:8d:f4:cf:ed:2a:f1:06:d7:69:f7:78:
         99:d3:9c:e2:ce:28:1d:56:d8:c7:fe:72:80:a6:dc:15:30:55:
         a7:47:7a:57:42:2b:5f:6f:8d:a1:63:ce:7e:2a:6f:a0:2e:d4:
         b0:24:54:de:af:ec:82:9c:28:7d:23:81:31:36:14:db:9d:9b:
         3a:c0:dd:e9:1a:9b:fd:88:59:4b:81:d4:5e:ff:b9:77:0d:0d:
         e1:3e:cb:3c:3e:d7:43:db:04:02:5c:a2:89:5d:e1:e9:71:11:
         45:15:80:9c:be:04:c8:d6:b8:f6:c7:09:b5:e1:6f:ee:3f:79:
         ee:17:2c:c2:ca:bd:c2:2e:1f:60:46:58:f2:7f:83:2a:98:1b:
         5a:8f:96:aa:5f:96:36:a6:d1:ff:88:85:90:e7:de:b3:cc:30:
         79:27:f2:a0:ea:ab:b3:da:33:46:bb:6e:62:e8:ad:97:49:a3:
         15:ba:b0:26:b1:1e:c4:4e:83:ba:b8:90:8b:d9:8a:3e:11:14:
         0f:59:22:fc:ab:28:95:a0:a9:fa:f4:f2:3c:33:c0:2e:ff:80:
         4e:a3:6b:d0:9c:b1:a5:ed:25:7b:e1:dd:a4:df:40:6f:ff:a8:
         01:a1:03:51:d7:9d:1b:fe:17:f6:77:4c:61:42:f4:a2:c3:6c:
         5e:11:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:38 2025 by rpki-client