Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/57eeb084-4f4e-3556-9d73-4953964b78df.roa
File:                     57eeb084-4f4e-3556-9d73-4953964b78df.roa (raw, json)
Hash identifier:          yNuwWXuZS4nLgdDimeH+aKVNsNC10/Q/gNIXrzaTi/Q=
Subject key identifier:   88:95:C9:31:06:99:27:E1:D2:12:43:31:ED:FF:D3:34:08:A9:16:EC
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285849DCEA09610F4A7DC2D7C44600
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/57eeb084-4f4e-3556-9d73-4953964b78df.roa
Signing time:             Thu 15 May 2025 16:03:13 +0000
ROA not before:           Thu 15 May 2025 16:03:13 +0000
ROA not after:            Wed 13 Aug 2025 16:03:13 +0000
asID:                     7764
IP address blocks:        2610:20:2081:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:ea:09:61:0f:4a:7d:c2:d7:c4:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: May 15 16:03:13 2025 GMT
            Not After : Aug 13 16:03:13 2025 GMT
        Subject: CN=087b2d0b-916c-47f2-a861-85f03d14f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:39:e0:6b:f0:a2:d6:a6:6c:23:da:c4:b3:
                    09:78:19:8b:7f:a4:e2:9e:72:b9:ab:7d:4f:cb:2d:
                    35:0d:3a:86:7b:4d:23:ec:e7:0a:87:2b:1c:0e:39:
                    a3:4c:c1:fb:1a:dc:12:29:c4:3b:53:7b:7d:81:7b:
                    86:30:f6:87:95:5b:e5:f2:88:9e:4b:dd:73:c2:8b:
                    92:ef:df:f4:b3:fe:44:ed:83:aa:c3:49:47:bb:d8:
                    b2:01:e5:8b:2a:0e:96:f2:b9:f5:8e:ac:b8:7f:de:
                    71:50:f1:a6:0b:95:66:75:25:96:32:70:3b:2f:ed:
                    ff:3c:fa:78:03:23:36:35:ee:f6:b0:c6:ba:b4:fd:
                    9c:37:a3:b1:b5:c0:6a:9e:77:1e:d2:6a:ae:fa:42:
                    f8:93:aa:a6:f3:b3:84:1e:29:09:e0:4b:8e:dd:ff:
                    2b:2f:4d:b8:46:36:f0:51:48:90:66:cb:3f:42:5e:
                    1b:8b:e7:8c:c2:15:89:bf:9f:a9:7d:04:f1:53:bb:
                    f2:49:83:1d:91:fe:f5:3d:a8:3f:65:d6:6c:f0:79:
                    0a:7b:fb:4d:32:6f:ee:3b:5d:00:f6:03:4c:d1:18:
                    07:91:33:2b:85:6b:d2:2f:9c:61:23:e9:f0:8c:72:
                    32:61:de:44:94:16:54:d8:bd:57:34:11:3e:51:76:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:C9:31:06:99:27:E1:D2:12:43:31:ED:FF:D3:34:08:A9:16:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/57eeb084-4f4e-3556-9d73-4953964b78df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2081:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:aa:9c:73:18:b6:6e:49:8e:3f:29:73:92:6a:c6:2a:f5:
         81:93:4c:c2:73:49:70:f5:1c:15:15:4f:01:f5:68:61:c4:81:
         a0:fa:ac:08:c6:23:ef:73:cb:d8:b5:33:ee:72:03:5d:99:d7:
         ec:c9:9a:27:de:01:7f:b1:39:43:a0:85:77:d9:e7:48:11:42:
         ea:0c:c1:74:34:09:8c:7b:63:06:f6:22:2c:07:24:2e:23:a9:
         aa:30:5c:ca:51:33:38:56:1a:19:f7:b6:58:98:fa:f6:3a:68:
         10:38:b2:43:d7:f6:79:3d:5a:e0:b4:04:50:62:4f:bc:36:e5:
         08:4c:55:11:ce:88:3b:d1:74:4f:8b:0e:ee:e0:0a:7d:09:0c:
         6e:f4:77:4c:3a:b1:a1:97:29:9f:fe:cc:d5:e8:e6:87:ab:85:
         a6:36:d6:db:65:bc:a9:50:97:57:ab:98:c1:1b:51:83:7a:54:
         f5:66:7c:38:77:e6:a8:86:84:e7:c9:90:30:a7:7c:22:6b:19:
         10:49:a6:b3:b4:72:c0:02:e4:0b:bb:d3:45:00:c8:b6:da:bf:
         f6:2b:ca:ce:eb:b2:41:ec:31:c4:58:21:4c:63:e3:a1:75:11:
         56:44:30:a0:22:cb:23:cd:d0:05:af:ee:d4:73:4b:3b:ef:f4:
         93:7e:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:54:25 2025 by rpki-client