Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/eef91013-9a78-340b-8bf7-b11c3a2d14a2.roa
File:                     eef91013-9a78-340b-8bf7-b11c3a2d14a2.roa (raw, json)
Hash identifier:          iRscrxrlXYZiOCatH4pC4+LaGMRleQF/aR/k2X8vo3w=
Subject key identifier:   CF:73:D5:EE:51:39:42:AC:D7:7D:40:7C:60:B7:1A:42:7C:51:B1:1B
Certificate issuer:       /CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
Certificate serial:       010D0C9F4328584A9D30E00895EFEFDFBC8A1700
Authority key identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/eef91013-9a78-340b-8bf7-b11c3a2d14a2.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     40519
IP address blocks:        2001:504:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e0:08:95:ef:ef:df:bc:8a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=3175c174-97d0-4e68-b055-e067f441e3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:68:fa:81:9c:7b:33:12:29:88:ee:09:95:
                    2b:98:1d:4c:4e:87:8a:7b:b3:87:fd:7c:03:21:28:
                    fa:38:bc:ce:fd:a8:20:f3:5d:ce:d8:e4:0b:9c:d1:
                    7f:8b:e4:56:36:02:7d:9e:9c:c0:dc:1d:b6:14:58:
                    62:97:57:cb:82:cd:d7:72:11:1d:1b:6a:2a:b6:b5:
                    7a:0d:ef:dd:7a:a2:a4:d7:e9:8a:e5:7e:08:53:1d:
                    f0:f7:40:8f:25:a6:bb:82:4d:9a:6b:41:73:48:ea:
                    eb:72:17:b8:54:18:22:86:f9:a9:2b:ae:cc:f8:79:
                    01:c6:c8:1a:3c:75:1c:cb:36:ea:32:b9:d5:29:5a:
                    64:6f:7e:f2:14:4a:fb:ce:9b:07:f7:af:b6:6c:be:
                    d1:11:0c:9e:45:f0:6b:c7:05:90:43:cb:17:ab:cd:
                    a0:89:61:cd:67:e0:b8:4b:83:a0:0c:08:f1:2c:17:
                    88:c0:08:81:88:db:53:1f:75:9a:4f:2c:cc:72:30:
                    58:42:ad:28:3b:95:eb:82:5c:22:61:24:fa:5f:7a:
                    39:1c:8b:83:f9:0a:c1:03:c9:9c:74:7b:f4:31:23:
                    da:a3:ac:e2:aa:89:76:79:39:4b:d7:25:5a:06:b2:
                    73:3e:b5:15:9c:50:f8:e3:cb:47:f2:b0:0c:d8:bf:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:D5:EE:51:39:42:AC:D7:7D:40:7C:60:B7:1A:42:7C:51:B1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/eef91013-9a78-340b-8bf7-b11c3a2d14a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl

            X509v3 Authority Key Identifier:
                keyid:86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:46:fe:9d:be:dd:02:2c:3d:f2:86:bf:71:c7:6f:b7:72:
         c7:0b:98:7d:40:a4:18:db:a3:bc:87:f8:aa:cf:5b:24:2b:7a:
         c4:6a:cf:fc:ff:1b:b5:0c:2e:eb:84:3c:fa:a7:e7:87:af:dd:
         96:28:4b:c5:0d:52:24:52:f2:cb:b4:dc:7a:89:02:e9:86:78:
         60:16:fe:57:58:89:f3:82:08:db:b5:7b:3d:2a:a9:09:f2:79:
         49:a2:43:72:04:d4:8d:93:54:c3:22:a2:d6:08:6a:cd:4b:e9:
         f1:3d:38:82:77:4d:ab:a6:f4:6a:4b:09:dd:c9:96:59:9f:8b:
         19:19:5f:8a:dd:6f:5f:d5:ff:69:5d:0c:d1:e4:cf:94:18:47:
         58:ab:e5:77:96:6c:ad:7d:e3:11:8a:70:cb:5f:1d:8a:f9:21:
         74:5c:cc:73:bb:2e:14:0d:0b:c4:15:d5:b4:0f:ce:d1:17:bf:
         21:3e:35:c6:60:4f:eb:d4:08:4b:ca:2f:45:da:b3:69:93:4b:
         71:64:e8:8d:cc:ca:8a:df:f5:37:2b:02:03:3c:8d:06:aa:0b:
         10:7a:5e:d9:c8:9e:a2:74:1c:4e:ea:68:3d:df:38:93:c4:84:
         50:c3:fd:6e:e6:25:72:6c:42:36:15:14:51:95:7a:fe:0f:e0:
         dc:c7:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:10 2025 by rpki-client