Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
File:                     bfc8160e-ea00-31d5-a587-02c976b74661.roa (raw, json)
Hash identifier:          OD+9DAzNn2T9baMVUdhz5s+it5kFiy44nVUNjXESJyo=
Subject key identifier:   B7:D1:A9:07:E2:A9:30:FA:02:56:0B:1D:A9:A9:41:2A:68:8D:BF:CB
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584A612B1E4410067B4DF22FB900
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2607:e740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1e:44:10:06:7b:4d:f2:2f:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=58d2528a-0009-4908-839e-271b2e5e7c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:8f:b4:46:1c:47:46:85:65:8e:66:06:a7:
                    bb:a3:f8:f6:cf:42:8c:c8:07:1e:11:d0:be:df:46:
                    2b:1f:40:d4:2f:05:0d:2a:cd:c7:5c:3e:0e:16:e4:
                    3b:a5:e9:ad:19:80:e8:57:83:b9:34:49:1a:06:e9:
                    3d:03:73:53:fe:36:b1:fa:ce:0a:17:92:eb:e9:ac:
                    c6:e7:43:9a:12:a9:22:be:e9:da:10:66:21:8d:7b:
                    72:7f:f8:9d:25:89:23:fa:b9:34:2f:06:a2:bd:5a:
                    6c:24:b2:90:9d:83:5e:33:94:0d:a0:f3:cf:5b:a0:
                    e5:07:42:09:f4:f2:2d:dd:f1:73:45:d7:1a:c0:7a:
                    dc:14:93:33:1c:d1:2f:7c:34:24:95:c6:56:28:13:
                    df:63:1a:d6:dc:0d:bf:56:c4:6c:70:da:fa:1a:84:
                    18:fd:97:5d:80:21:af:d3:7a:8e:1d:25:92:66:a2:
                    b3:2d:0b:1e:af:25:78:51:29:23:fe:32:4b:4d:43:
                    97:f4:69:e3:69:b1:6f:7d:cd:5e:52:ee:6e:59:7a:
                    72:60:c6:f6:57:ac:97:20:dd:9e:b8:bf:dc:3b:cd:
                    54:cb:6a:f9:55:ae:c8:e2:e6:d1:03:65:c2:8f:f4:
                    82:a9:38:5e:52:29:89:52:ed:84:66:e0:52:f4:7d:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D1:A9:07:E2:A9:30:FA:02:56:0B:1D:A9:A9:41:2A:68:8D:BF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:33:3f:a5:e6:eb:06:a8:49:18:9b:a1:d1:3d:1b:4b:70:
         38:a8:62:df:c0:3e:e6:a2:11:91:63:ac:94:88:ab:69:e7:25:
         14:f9:70:88:c1:a2:97:ec:5f:f7:83:01:9f:10:44:af:9a:11:
         c9:e9:7b:84:37:3e:9a:14:23:9a:79:a7:5a:d8:0f:7e:e9:f8:
         50:c7:6f:f2:d6:2c:78:8c:97:98:22:22:78:46:2e:8e:25:5d:
         2a:71:b8:d8:dc:00:b6:a6:f4:fa:d2:c8:11:a7:03:e0:cd:fd:
         3d:c2:a2:64:37:5c:ca:8c:3c:7c:c3:e7:b5:b8:36:2d:30:7e:
         91:16:ce:48:36:70:b3:54:19:b2:ed:1c:64:40:e6:74:76:a7:
         5c:97:b2:c0:89:ad:6d:3a:82:4b:02:f4:b3:58:e1:69:d6:2d:
         49:72:c1:4e:a5:31:0e:b1:8f:ca:36:01:ef:7f:d1:c0:96:55:
         e3:19:98:6a:44:fe:3e:22:7e:2f:df:60:e0:dd:68:39:da:61:
         f8:00:06:b0:f1:ef:ee:f6:fe:41:cc:45:e2:14:ef:83:66:c8:
         02:95:1f:ce:21:82:fd:10:58:60:3c:e3:ae:be:c7:1d:e7:79:
         85:63:80:a9:34:26:33:59:16:70:65:a0:95:f2:bd:7c:25:9d:
         a8:d0:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:50 2025 by rpki-client