Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa
File:                     2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa (raw, json)
Hash identifier:          45jB5Uxguga4fikykzx33mfb+qyaghU9E2L/mheTWcA=
Subject key identifier:   02:F2:D9:FD:B4:D3:DE:00:7A:3F:4A:9E:FD:13:3B:E6:B6:8B:62:A8
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584A9870867FCF851858C0F6EE00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa
Signing time:             Mon 21 Jul 2025 20:10:21 +0000
ROA not before:           Mon 21 Jul 2025 20:10:21 +0000
ROA not after:            Sun 19 Oct 2025 20:10:21 +0000
asID:                     33343
IP address blocks:        2610:20::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:70:86:7f:cf:85:18:58:c0:f6:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jul 21 20:10:21 2025 GMT
            Not After : Oct 19 20:10:21 2025 GMT
        Subject: CN=7711e97f-e163-41b3-9394-ea072c5c341e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:60:f4:2a:aa:02:dc:08:b4:8d:ad:4b:1d:
                    41:69:bc:c3:ef:a3:7b:7f:86:58:83:37:fa:26:e5:
                    bb:cc:60:77:da:82:4e:ad:3c:78:a9:77:f7:1c:49:
                    94:97:ae:41:07:a9:70:e5:17:20:d4:1b:15:9d:a3:
                    e7:db:17:97:9d:e1:94:e8:01:9c:c8:cf:c4:eb:8e:
                    e1:2d:b2:59:1b:ca:b4:cf:3c:db:6f:ae:41:55:d5:
                    6f:fe:f5:55:12:d6:52:c3:22:bc:ad:71:f9:56:b5:
                    98:28:2c:db:fa:de:75:21:fd:f5:94:2b:58:13:7e:
                    be:c6:99:50:64:c2:5a:7c:45:cb:ad:fa:49:34:52:
                    36:27:8b:b4:43:5a:38:7e:54:5a:81:53:9c:30:2c:
                    a8:bc:d8:37:04:72:ad:a7:fd:bc:02:f5:d3:78:e5:
                    cd:c7:af:56:c5:be:08:c2:b6:47:50:d7:87:75:27:
                    ee:a1:ce:5c:10:2c:83:cc:e8:5e:38:5f:94:8e:c1:
                    3e:24:bd:40:a8:6d:ee:5f:7a:8d:eb:b8:b2:95:5b:
                    1f:03:e3:75:2a:40:92:fb:fb:2a:2e:26:6e:01:47:
                    45:ce:31:08:60:17:0e:5d:85:c2:3f:17:92:cc:8c:
                    f4:59:8d:a1:2b:c4:18:ae:99:14:7f:08:a2:03:03:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F2:D9:FD:B4:D3:DE:00:7A:3F:4A:9E:FD:13:3B:E6:B6:8B:62:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:62:a9:bc:f0:7e:45:50:b3:e1:f0:d6:51:6f:34:e5:90:
         68:49:f2:b7:ef:ac:cd:f3:13:94:ef:4c:b1:b8:4b:13:36:46:
         05:6c:7c:95:95:45:82:dc:25:79:e4:9d:1c:1f:fe:3b:27:ca:
         06:25:cb:f8:b8:2f:61:60:83:44:30:5d:ea:c6:fb:dd:c0:b5:
         88:19:42:7d:06:d2:75:fc:d2:40:5a:1b:d2:1f:03:25:a2:c5:
         2b:1e:b4:25:c6:2b:72:8b:a3:c2:11:86:74:8f:01:2e:9e:53:
         d5:c1:85:66:01:27:c5:67:74:af:4a:c8:7f:a7:23:46:bf:e4:
         3a:d9:f6:bd:be:65:fc:48:9a:f4:d3:27:48:c2:18:3a:eb:2c:
         28:43:76:de:8e:25:d3:c4:95:71:17:1b:10:e3:ca:38:d8:95:
         38:95:83:cf:d5:55:2f:86:e8:0e:e5:82:8e:8f:b2:64:c9:bf:
         19:d7:c9:6c:6c:04:69:f9:bd:49:f7:cb:77:f1:ce:95:c0:11:
         de:8f:19:f9:4f:8f:82:49:f5:ab:63:48:d2:45:22:51:ca:f2:
         8b:28:22:d8:93:d7:08:81:dd:7a:1a:50:2c:14:6a:3d:8c:a7:
         d5:72:69:f1:b7:d9:94:36:27:01:0e:d9:84:33:62:cf:fc:5d:
         45:f3:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:55 2025 by rpki-client