Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa
File:                     bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa (raw, json)
Hash identifier:          vVUaDALtPkzhH52XTvokMDv+VXkAEUTeTLI5hljgluc=
Subject key identifier:   59:F2:04:49:BE:1B:1E:8B:E6:D5:87:FC:44:6C:EE:33:9C:1C:8F:C2
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584ABD4B9C900F873A4C5448C820
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1c00::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9c:90:0f:87:3a:4c:54:48:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=034ee8cc-f5c3-4bf3-bd2d-52de9b6ee17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:6f:d4:9b:21:bb:6d:96:b4:3b:8b:e6:1b:
                    34:59:70:16:39:ed:db:ac:be:c8:87:7a:4f:2c:f2:
                    a6:10:95:f2:40:59:71:85:08:ab:e1:fa:c7:38:14:
                    78:8d:60:88:7f:23:46:6d:cc:41:4c:05:f0:62:c2:
                    4e:75:a6:8c:be:dc:93:66:98:c4:b9:61:19:d3:d1:
                    a4:06:cb:7c:f3:93:b5:3f:4c:6b:e4:b1:61:dd:90:
                    20:f2:c8:01:cb:e2:d4:48:bd:db:2a:4d:3c:f4:1c:
                    31:0f:d8:e7:e1:a3:59:a4:a5:a6:f5:a6:9f:1f:69:
                    a5:b6:d8:29:42:75:6f:25:91:03:d0:ae:72:fc:c0:
                    5d:18:c3:ee:71:b4:08:f5:a7:3c:39:3d:a9:f5:9e:
                    f6:40:e6:0b:5f:f9:e2:18:13:f2:f3:7a:7e:57:ee:
                    bc:54:54:f3:45:a0:7c:a2:5c:4a:c4:ca:30:ea:e3:
                    82:4d:93:e0:b5:f4:64:cc:89:96:4b:51:fb:a2:93:
                    4b:72:f9:bf:8f:85:21:74:07:54:b8:b0:a0:b6:78:
                    d8:0c:7d:c6:4f:ef:a5:07:15:ce:e8:16:b4:8a:74:
                    b9:03:f7:5f:35:7d:bc:91:14:c1:10:fe:17:32:d0:
                    7f:43:f4:f9:50:d3:e9:ba:60:5b:79:bb:06:f4:ed:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:04:49:BE:1B:1E:8B:E6:D5:87:FC:44:6C:EE:33:9C:1C:8F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:04:8b:28:65:3f:d3:d7:ee:98:b6:63:66:41:74:6e:33:dd:
         6c:05:69:68:41:6a:29:a2:3b:e9:a6:76:17:7e:2b:d0:65:40:
         fc:ec:4a:7f:ec:4b:d4:dd:fc:01:e8:6f:33:1c:66:db:c9:ac:
         5a:50:3e:c0:a9:ca:8f:ce:7e:3c:e1:63:ae:0f:da:f0:9e:9a:
         16:60:5a:9a:55:81:4d:44:6d:47:7c:50:0d:1f:41:24:2a:a3:
         2c:c0:8c:52:38:6e:bf:4e:44:fd:d1:d7:3e:31:c1:7b:0c:ec:
         83:ad:9c:29:a2:fa:93:8d:89:f4:7a:b8:00:0a:c1:34:6b:1a:
         da:ef:90:9f:75:aa:7e:ad:14:f8:7a:a8:01:9d:ab:97:38:23:
         1e:9f:c8:46:22:24:72:45:49:59:c0:51:4a:c3:d3:a0:61:e2:
         d3:e8:17:7f:8e:b2:75:cd:cc:3d:d8:41:cd:bf:97:20:56:e9:
         5e:1f:0e:bc:e7:de:3b:78:b9:1c:60:f6:0a:8d:48:4b:fb:5c:
         3a:52:7a:09:55:84:39:0c:ce:54:fd:9d:8b:10:00:fc:ad:f5:
         37:bb:25:70:e5:91:f4:76:92:01:01:4b:2b:84:2d:0e:3d:2e:
         8e:71:ac:8c:eb:b4:32:cc:96:14:bb:0a:d8:ad:63:61:8c:4f:
         56:7e:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:18 2025 by rpki-client