Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/835b6054-340d-3813-bbc0-22a7652ddac2.roa
File:                     835b6054-340d-3813-bbc0-22a7652ddac2.roa (raw, json)
Hash identifier:          7N8Bh4s2aZnnZlXhcFDpEMxCcYY/qP9zqPGzh3QygoI=
Subject key identifier:   F8:85:81:89:63:FC:F5:7C:07:38:68:6E:81:1C:A2:64:58:28:87:FE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A2E40DF0D6C69834B3E222540
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/835b6054-340d-3813-bbc0-22a7652ddac2.roa
Signing time:             Fri 13 Jun 2025 19:18:39 +0000
ROA not before:           Fri 13 Jun 2025 19:18:39 +0000
ROA not after:            Thu 11 Sep 2025 19:18:39 +0000
asID:                     23473
IP address blocks:        2607:f750:6700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:40:df:0d:6c:69:83:4b:3e:22:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 13 19:18:39 2025 GMT
            Not After : Sep 11 19:18:39 2025 GMT
        Subject: CN=04e91798-11f2-4bb2-a13b-cf440b64cd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:ba:27:4b:da:96:0b:d2:25:50:17:53:a6:
                    f3:a7:3b:77:78:83:8f:60:dc:95:4e:5c:30:13:13:
                    b7:64:e8:50:41:c0:7d:36:b4:ee:0f:eb:f4:ef:32:
                    fe:2a:02:fd:03:cb:d1:14:6a:e1:51:fe:f0:c9:5e:
                    35:7c:97:c8:13:5d:a0:c3:fc:ec:34:76:63:d9:2b:
                    78:83:bd:e6:53:6a:d2:13:3f:0d:f4:5c:52:f0:f6:
                    80:02:5f:9b:a9:87:18:5d:6b:40:2e:4b:4d:68:11:
                    e0:72:8c:f4:52:83:b0:a3:f6:37:55:40:71:13:00:
                    ec:7e:50:af:43:94:8f:2c:7d:d7:68:51:85:83:c0:
                    fd:e6:4b:17:f5:68:cd:14:f1:ad:10:ba:0f:42:af:
                    78:0f:11:cd:ee:69:b4:19:59:37:8f:50:ef:47:10:
                    59:8d:cb:ee:41:4e:54:52:fb:8d:f1:64:8a:fa:28:
                    3d:8a:14:f4:55:6a:6e:fc:42:80:ee:0d:9f:1d:ff:
                    72:8d:8b:4d:07:99:8b:37:4b:31:40:8b:f4:a3:d8:
                    ac:9a:f8:d3:aa:4b:3a:70:de:f1:d3:8a:5b:e0:c2:
                    73:22:93:48:9e:bf:d1:a4:fb:17:3c:26:f0:27:7e:
                    39:f9:0b:44:8f:86:2e:e9:b2:2a:de:ef:43:2b:b1:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:85:81:89:63:FC:F5:7C:07:38:68:6E:81:1C:A2:64:58:28:87:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/835b6054-340d-3813-bbc0-22a7652ddac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:88:8f:cb:ed:2e:25:da:ad:f5:bf:43:d1:63:d6:28:1e:
         13:5f:13:02:7c:8d:ac:92:ef:3a:5e:4f:83:72:a2:52:8f:9d:
         a9:a9:5d:e7:4e:59:7d:78:66:f6:45:bd:a5:b4:7d:9f:f0:51:
         55:bf:23:16:d8:de:81:21:0c:7b:6d:94:ce:4e:a6:a4:d4:45:
         1c:d0:d7:d7:b4:df:f0:f4:0e:05:aa:4b:6c:1d:69:69:62:05:
         cc:24:b9:07:fb:44:f5:c3:06:6d:e6:97:b3:07:61:75:af:71:
         b5:84:0f:90:52:d6:e9:6e:57:99:2b:34:2b:82:ec:23:33:55:
         0e:9f:cb:a5:78:9f:df:26:bd:29:ea:15:92:44:fe:92:8f:5f:
         85:a3:a1:bc:83:98:44:06:af:29:5b:07:a6:60:18:66:ee:9c:
         16:03:69:c5:18:05:56:f3:d1:87:fb:a9:2e:86:f9:7d:49:35:
         5d:26:fd:40:b5:db:92:6e:1c:0a:a6:10:08:02:86:d4:ea:a7:
         af:81:1f:09:ad:d8:c2:3d:3a:34:05:c4:80:89:fd:d9:f8:15:
         d0:d9:97:61:51:30:ac:50:99:59:52:c4:c0:8d:e6:73:97:8b:
         d2:5a:c9:57:86:2a:69:4e:1d:f6:9f:94:12:00:9d:ba:e3:60:
         52:5c:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:53:47 2025 by rpki-client