Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
File:                     8d29cc79-0418-3685-a36b-52ea43d6efc2.roa (raw, json)
Hash identifier:          qdd3lU23EU0Q8DkwVAM4iQroNy3YBBwwCPCRtrA0Oy8=
Subject key identifier:   20:7F:96:20:37:51:3F:07:2D:38:6B:CD:80:8A:8D:A5:1F:D7:58:95
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584A17300BDC8A38783E28775540
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     10835
IP address blocks:        2607:f498::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0b:dc:8a:38:78:3e:28:77:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=85fb107c-4383-4561-994f-a74827487151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a4:e2:2d:df:90:da:f2:77:48:d3:1b:b6:75:
                    f1:19:87:0c:61:77:37:4e:21:39:60:32:77:74:dd:
                    39:27:d9:8d:35:e8:9f:17:1f:db:cd:89:52:86:89:
                    c9:68:53:19:15:f1:bd:1e:36:28:0c:14:d1:5a:d6:
                    0d:76:3b:44:d6:3e:6b:1f:fa:df:5f:d2:c9:69:4c:
                    16:73:a6:48:36:78:5d:97:3f:03:0b:f7:dc:52:6c:
                    88:63:9c:1c:24:3a:52:33:7b:df:bd:4a:7b:10:e3:
                    2c:f2:4d:3c:96:47:c4:40:63:e0:27:87:04:a8:1a:
                    ec:42:15:1a:4e:c3:f0:80:ad:ec:29:45:8d:7e:8b:
                    82:0d:4d:e4:03:e3:41:68:76:c3:65:3a:83:1f:97:
                    5f:4a:90:0c:25:36:5d:ee:96:57:85:bc:a5:8a:76:
                    21:1d:b2:8d:ea:29:8d:9e:1d:82:e9:3c:92:3b:ee:
                    7c:7b:46:8d:00:ad:e3:bd:46:c7:5d:31:b1:a6:48:
                    d7:b8:0d:ee:30:6d:da:70:ff:7b:d9:4e:1c:6a:53:
                    ce:5e:5d:ad:27:c1:bd:7b:c4:94:0c:12:df:8e:35:
                    b8:4d:47:93:30:b8:49:7d:b0:58:78:99:98:b3:d7:
                    f8:fc:ab:ab:6f:bc:3c:8b:9c:6e:0b:00:e1:bb:bf:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:96:20:37:51:3F:07:2D:38:6B:CD:80:8A:8D:A5:1F:D7:58:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f498::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:bf:2e:65:b0:cd:f9:21:a6:a4:09:11:7c:32:dc:4d:f9:
         a5:3c:d2:02:75:a2:6c:fb:08:7f:e4:a5:92:53:fb:8d:60:78:
         76:12:07:31:18:fe:90:2f:85:88:9e:2b:38:27:93:6b:e9:96:
         02:9b:d9:da:3c:ae:e1:71:13:fb:cd:23:cc:dd:c4:62:27:49:
         99:98:d0:18:a9:b2:a8:f5:7d:4e:4a:02:4e:08:f6:93:ab:02:
         6e:be:6b:11:c5:c4:59:d3:90:a8:a9:4a:38:3d:88:59:ce:c5:
         14:14:b4:d8:df:36:a1:9d:65:49:9e:a3:b4:10:35:2b:2a:c2:
         60:5c:b4:de:4a:bb:71:76:28:c1:29:7e:23:73:6d:b7:b4:fb:
         1b:39:a3:ee:d3:20:aa:80:bd:cb:74:39:56:86:07:1e:2f:1c:
         5e:13:6b:68:95:13:3a:54:9e:87:f3:73:8f:46:73:76:13:7c:
         8b:ee:0d:ae:45:2e:ed:7b:8e:9a:7c:a2:af:84:5c:3c:f0:9c:
         26:5e:ed:33:94:f5:17:5b:5c:38:62:23:5d:4b:a0:53:2d:79:
         95:95:55:6a:91:d8:3f:c4:a4:e0:f6:13:15:ca:16:fa:56:f4:
         ed:11:d9:e0:b9:a4:2b:3c:7b:fe:a4:27:e8:d6:1f:1c:09:b9:
         f4:c0:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:45 2025 by rpki-client