Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
File:                     7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json)
Hash identifier:          4Q7FrS2DpTd/djDIfd0riXigK6F1vjJ5RZY5EKl//xg=
Subject key identifier:   E0:A0:BD:EB:18:B3:DC:B0:6D:4C:D1:20:2B:F3:66:81:4F:AA:8D:84
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F4328584A10354E984F31612F7D70F600
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     4226
IP address blocks:        2604:f580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4e:98:4f:31:61:2f:7d:70:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=90b5d27f-eb62-4b09-bc9f-0037caafd025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:ad:90:89:b2:65:e5:f7:24:44:b7:d9:b7:
                    d1:2d:31:df:7b:5e:8d:e0:3b:6d:72:a9:50:ec:c2:
                    fb:93:99:a5:40:20:95:a6:8f:fa:b2:74:08:a0:d6:
                    f1:a7:d7:44:f6:db:1f:33:6b:5c:67:32:ff:a4:7e:
                    0c:cd:1c:8e:c6:9d:fe:a9:aa:d8:cc:04:8f:9e:dc:
                    88:96:9d:b1:a6:12:05:e2:3d:b7:8b:ce:a3:22:9d:
                    e1:07:67:df:29:5a:3c:78:d3:69:ff:db:cc:3a:cd:
                    0b:2a:52:56:15:05:eb:ff:f0:e3:62:1a:b3:24:d2:
                    a5:5a:3d:2f:28:4e:d1:c4:70:3d:80:5e:5e:b1:8c:
                    a0:b4:39:5f:d8:98:be:f3:87:69:e0:31:04:a2:5c:
                    74:ac:bb:0a:4d:98:07:6e:09:3a:83:76:1c:16:a8:
                    ba:78:a8:8e:68:d6:78:c4:b7:3f:dc:59:f4:41:f0:
                    b4:bf:4d:49:66:aa:6a:e3:a4:20:72:df:5e:a1:76:
                    42:13:6e:18:1c:51:29:04:7b:68:50:0e:5c:eb:ea:
                    03:72:6d:ae:e7:db:da:f5:f9:20:5c:9a:02:34:a3:
                    0b:dd:fe:66:84:2c:18:95:e3:23:c5:c6:1f:19:d1:
                    f5:5d:28:cc:c0:24:62:fc:8f:06:dd:64:ab:2f:a6:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:BD:EB:18:B3:DC:B0:6D:4C:D1:20:2B:F3:66:81:4F:AA:8D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:5a:89:f6:64:6f:78:88:86:61:ae:57:00:27:d0:9d:eb:
         20:05:1b:da:3b:a9:9a:2a:3d:1a:f9:05:15:cb:6e:a3:1c:70:
         10:de:d4:e6:b6:c0:e6:3d:92:ad:dd:11:7b:6b:19:2c:9a:3c:
         71:c0:c8:72:af:94:d3:75:24:66:53:29:c0:a3:2c:f6:44:17:
         b8:5d:8a:b9:6e:08:7e:b8:9b:c0:4d:b6:f5:0e:32:e4:9d:3a:
         b8:20:f9:7a:e7:74:1e:d6:0d:31:88:5a:79:0b:22:0c:f8:8a:
         fa:be:d4:59:71:ce:09:c8:3b:0b:c1:05:07:c9:5e:f2:d4:d8:
         54:80:6e:84:d3:b4:f7:5d:c6:aa:04:b5:56:2f:09:6d:5a:9b:
         f3:db:8f:d1:54:36:27:dd:38:34:51:91:79:c7:0d:1e:0d:1c:
         b2:47:cc:ca:57:6b:3c:ee:5c:7b:9e:99:66:f2:46:b0:1d:79:
         a3:54:0f:cb:57:62:68:4e:cf:d7:d3:15:4c:e4:67:b8:38:d5:
         5e:24:30:60:26:68:14:bb:2e:0e:d2:72:74:0f:6e:f4:9d:97:
         90:1f:13:84:6b:0a:02:94:df:66:17:b6:78:c1:c5:f1:0a:18:
         05:7a:c7:4b:63:2f:04:18:ab:70:68:c2:06:85:db:e5:97:40:
         b6:09:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:45:43 2025 by rpki-client