Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa
File:                     a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa (raw, json)
Hash identifier:          oE0ARf3I731uG9kIVXqjFX0vIjbchaSHGoeJsZRE3WU=
Subject key identifier:   95:79:2C:CB:8A:88:F6:51:1F:6D:8D:5C:7C:29:53:F3:41:FF:46:B8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964B5C06940DD9C2587580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     19115
IP address blocks:        2607:f098::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4b:5c:06:94:0d:d9:c2:58:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c5f3199d-c397-42ee-b1d8-edc34f7ba99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:bd:16:1c:e4:6e:6a:9c:22:23:b4:94:75:58:
                    7d:87:76:11:13:0c:13:cb:cd:03:6b:b6:cb:c9:5c:
                    5f:9d:1b:18:68:9a:83:45:12:31:95:28:8d:22:fb:
                    9e:46:eb:36:61:ee:cb:fe:2d:43:86:7e:d5:11:67:
                    e9:79:9b:5e:1b:90:f4:dc:a0:d0:60:77:40:60:49:
                    e2:51:a4:13:f4:38:f6:3a:85:01:c3:ac:16:bd:d0:
                    dd:c0:ae:da:61:d8:e3:58:11:ef:3f:68:87:d1:99:
                    a0:d3:cb:87:07:af:7a:75:08:5f:d3:62:45:99:64:
                    9e:a4:aa:44:8c:8b:6e:0d:6d:b8:0c:30:0a:32:bc:
                    69:b4:4a:9e:30:33:6b:33:ac:d0:3d:5d:cd:a9:52:
                    77:d7:c4:5b:74:2c:f5:49:ff:9e:10:26:2c:79:7d:
                    ae:34:a5:1b:8b:b2:2e:aa:b1:1a:35:3e:31:ae:2c:
                    a4:f4:5a:16:f0:f3:90:67:dc:f7:96:d4:a6:1a:43:
                    b4:4b:dd:89:54:b0:b5:1f:cf:e8:3c:8d:b0:18:bf:
                    e1:e0:d0:a8:89:d8:46:b4:0e:d7:ed:7c:4f:93:c5:
                    21:e7:ed:0a:05:50:04:c3:55:22:8f:0e:f5:ac:05:
                    e1:5d:18:b3:0c:ac:68:88:01:4b:01:72:26:ee:84:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:79:2C:CB:8A:88:F6:51:1F:6D:8D:5C:7C:29:53:F3:41:FF:46:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:23:19:dc:be:bc:5f:92:d2:60:8b:82:57:3f:29:c7:69:df:
         8e:f3:4f:22:f1:ec:42:ea:72:9d:83:a5:12:b9:00:35:1c:1f:
         4b:75:57:90:f7:37:3e:be:5b:26:48:53:37:d3:9e:19:f9:f9:
         47:b5:9c:98:56:5d:ae:b6:a2:d0:28:1b:ac:b9:e3:c0:f0:72:
         b2:78:3a:7d:7c:cb:0d:d6:36:15:9a:68:38:8b:d0:aa:ef:5b:
         3d:09:a4:e7:dc:e5:e2:5a:e5:66:9b:e2:04:3b:15:33:69:cc:
         f4:3e:51:df:5f:6a:3c:12:f6:3c:fd:ca:6c:cc:d5:8f:fa:36:
         f9:ef:31:60:fe:53:34:f4:9b:19:3c:fb:51:c0:4b:ee:4b:05:
         fe:c1:0c:04:5d:a9:b8:eb:9d:e7:45:cd:e4:e4:e8:4f:b6:7c:
         ef:a4:9a:7a:7f:15:d5:a6:78:f1:b4:79:0d:0b:3d:09:f5:6d:
         e7:e3:ba:dc:0c:b5:af:a7:1e:00:b9:8a:16:c3:63:3f:23:d2:
         45:e1:c1:48:ec:eb:d0:44:bc:45:8f:08:66:78:50:3a:94:cc:
         63:76:d3:4b:ab:6e:2c:23:ec:82:60:72:0c:8e:e4:85:40:2f:
         80:4f:2c:30:41:bc:ff:81:6e:3a:fc:4a:c6:4f:5b:25:a1:29:
         7a:07:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:30 2025 by rpki-client