Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
File:                     09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json)
Hash identifier:          aM44F8Bg0L7amU6hKZjCrOrEQWPKM+/WAzTJNDmB8T0=
Subject key identifier:   77:7F:27:70:EB:32:32:77:9D:41:3D:EF:29:FB:15:B2:22:0D:90:16
Certificate issuer:       /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial:       010D0C9F4328584A6DBB3C7D2EEF4D39DF8D3C80
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     399078
IP address blocks:        2606:42c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3c:7d:2e:ef:4d:39:df:8d:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=b2c785ee-eca5-4e9b-94b9-0a1fb07689e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:c9:09:e1:24:a1:6a:53:b4:8f:5c:f8:1c:
                    8e:1e:e3:a4:15:d3:5f:69:a9:9c:79:d0:b7:23:a5:
                    19:1d:b8:a4:b9:56:70:ad:85:9d:df:9e:00:27:96:
                    42:1d:4c:11:1f:d8:c9:8b:a3:0b:05:a1:5c:a4:3b:
                    b5:41:2a:1c:ce:fe:fb:ba:02:16:e7:f6:9d:2c:ff:
                    47:95:12:88:a9:ab:b7:0a:21:7d:71:2b:da:b3:1e:
                    29:73:37:9f:44:73:2b:42:0e:4e:6e:da:41:49:fb:
                    ed:73:d7:92:25:f2:64:a1:3d:76:28:e5:4c:82:a6:
                    78:e7:59:f8:5d:b3:18:67:05:df:14:fc:d3:b3:f5:
                    ba:c0:a2:1f:0c:43:be:4d:9e:f5:fa:5e:e7:ad:dd:
                    10:0c:a9:ba:59:bb:f5:64:ed:05:5a:7d:b6:05:af:
                    76:dc:83:79:d0:5d:f9:a5:1c:53:44:91:61:49:00:
                    96:b1:1e:2e:51:03:59:eb:9e:3d:73:55:5e:e7:0b:
                    d0:88:7c:86:d8:9c:8f:2a:18:b1:9d:3d:7d:cf:74:
                    dc:f5:77:83:1d:0e:f9:89:81:95:f8:f1:cf:5b:59:
                    ad:91:45:e2:30:f1:97:af:46:e6:b5:33:02:f7:c9:
                    80:9b:6b:52:1f:15:ea:ab:97:63:d1:2e:c0:5c:59:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:27:70:EB:32:32:77:9D:41:3D:EF:29:FB:15:B2:22:0D:90:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:42c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:31:65:dc:d9:5a:ea:84:84:1f:d7:31:d6:56:25:8e:fb:
         53:1e:ae:8c:4b:83:38:5b:84:3a:bf:9c:68:6d:3e:c1:75:f2:
         e4:44:f9:5e:37:35:9c:c2:9e:bb:b8:1f:ae:a0:a9:0f:61:d4:
         55:aa:d4:ae:e5:0f:96:83:fb:af:d0:e3:38:8d:3e:51:c4:ad:
         69:52:17:9f:1d:4a:ad:7e:67:b6:98:93:5c:36:9d:66:d2:e1:
         90:bc:c7:0d:da:29:a4:49:43:4d:95:b5:e6:82:3d:69:20:45:
         f8:36:80:f7:e1:1b:aa:d5:6f:12:00:84:34:32:9e:7b:26:ad:
         e1:5b:9e:6b:8f:e2:23:80:96:98:2b:d6:ae:13:56:fd:7d:cc:
         58:af:9e:e6:d2:52:10:c4:d6:e3:5b:9d:60:a2:ea:96:28:d1:
         17:37:98:7d:af:9c:b0:c6:bc:1f:f5:1e:d4:24:64:e1:a1:9a:
         d2:49:0c:70:08:42:11:14:4d:a1:f3:de:9f:58:4a:67:d2:78:
         8c:ac:03:69:11:98:c5:8e:6f:fe:b0:79:d3:bf:f7:bc:58:5d:
         fa:ca:3e:5a:ee:cd:96:3d:12:bb:12:e2:9a:95:58:70:cb:21:
         e2:7a:12:3c:d7:cc:70:f5:bf:78:4f:3e:d1:e4:7b:0c:55:e5:
         b1:37:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:04 2025 by rpki-client