Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
File:                     623eee29-c1bb-3ce9-82ac-987b2182c917.roa (raw, json)
Hash identifier:          A54AmcQKIhaA+/iKgd/bGFf0ptdfwG6+Oj9eVIjM6lc=
Subject key identifier:   1D:65:7E:0B:A4:0F:42:68:FF:78:6D:CE:95:FC:31:F3:52:74:1D:3D
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F43285849ED4FC4BCC43D923B8EAE9C40
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     46208
IP address blocks:        2607:f5b8::/32 maxlen: 48
                          2607:f5b8::/33 maxlen: 48
                          2607:f5b8:8000::/33 maxlen: 48
                          2607:f5b8:8000::/34 maxlen: 48
                          2607:f5b8:c000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c4:bc:c4:3d:92:3b:8e:ae:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=a40fdf40-b6d0-4c25-b0cb-70b5cbdd8a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:50:2e:a5:4a:3c:39:10:6e:1c:5f:84:cf:
                    fa:b1:65:66:55:ea:c9:81:8f:2d:27:81:07:b6:72:
                    48:98:5d:5a:56:c1:ca:f9:84:9c:72:59:46:68:7f:
                    e9:fc:61:34:2d:c4:7a:e8:8e:95:ce:0b:98:d1:9b:
                    50:22:57:aa:40:11:2d:7f:1e:e2:90:20:c4:29:6b:
                    bb:8c:bd:6c:31:f1:dd:f5:45:ef:68:31:4c:c5:be:
                    3b:c0:64:39:7d:6a:ed:65:87:33:9d:7d:51:65:1f:
                    71:e5:21:b6:07:bb:86:e6:3d:f1:15:3b:46:b2:5c:
                    38:b1:ba:ae:64:b2:cc:ad:38:06:72:c4:1e:f2:df:
                    ee:46:37:e9:63:c4:b3:07:94:96:0b:60:1f:0b:63:
                    84:0f:2b:2d:24:66:75:0d:17:e0:ae:79:8d:1f:4b:
                    55:d6:63:b7:63:e7:09:e7:ed:9b:c4:78:96:b1:da:
                    17:af:18:13:2f:41:21:59:56:86:14:b0:1d:fd:c2:
                    3c:89:f1:f8:74:cc:b2:a4:21:a9:21:b7:c9:2f:d7:
                    e3:bb:25:9e:62:c1:b9:6a:41:bd:8f:60:3a:2e:87:
                    a4:a3:7b:05:65:17:bf:98:c7:43:09:44:1f:a7:8b:
                    d2:03:33:27:a3:0d:3c:ae:d8:61:c3:92:62:9e:41:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:7E:0B:A4:0F:42:68:FF:78:6D:CE:95:FC:31:F3:52:74:1D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:69:04:ec:c3:6d:dd:44:b3:e8:5d:90:d0:1e:c0:08:26:ea:
         bc:f1:4d:a7:48:90:b3:2f:38:d3:f1:4c:39:f5:0d:3f:f7:64:
         aa:17:7f:4a:5e:5a:dc:21:9a:c8:a9:74:4e:d5:fa:3e:b8:2d:
         21:15:8e:3d:e3:d3:f0:ce:8f:30:b7:3c:72:f2:e5:db:7c:2b:
         09:9d:46:9a:bb:56:78:85:1e:2f:0f:9c:59:38:c4:3a:a1:ac:
         c8:6f:d6:8c:49:07:38:2d:9c:ea:cf:fc:18:31:42:dd:19:78:
         b4:e7:3c:3b:9e:ea:e2:bc:72:69:46:95:5a:b3:e8:27:48:cd:
         2b:23:9b:5c:a6:92:01:51:73:3c:e0:67:45:e3:99:04:0f:53:
         5c:fc:1a:c3:70:7e:0c:37:11:a0:bf:46:e8:e2:54:fb:a6:f7:
         e1:6b:a6:07:13:27:c4:ed:8c:42:7e:dc:cf:f4:7c:a9:7c:97:
         35:eb:72:0b:59:76:a6:59:58:f8:2a:e5:ad:83:3c:bd:da:8b:
         8e:d7:c3:7e:d7:28:50:e7:8e:e3:60:ad:20:1a:8b:d1:95:f8:
         0b:b3:48:50:23:b4:c3:87:4d:28:7f:d4:da:ec:80:b1:dc:2f:
         62:8a:52:cd:a4:e8:a0:78:d5:f9:9d:8d:09:e3:5a:53:3c:59:
         5b:99:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:09 2025 by rpki-client