Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
File:                     9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json)
Hash identifier:          THPqJxpubXs8Le+skZ3/I1LEL1piG/Gpg9NzC0gT/sw=
Subject key identifier:   D2:DB:A3:E5:8F:D2:3C:4D:B2:E8:CA:9C:3E:11:97:56:B9:D8:49:3A
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584AB91BA920CF955A146B91EA00
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     27419
IP address blocks:        2606:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a9:20:cf:95:5a:14:6b:91:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=f22adc9a-cada-49bf-b8eb-1dd4b530e6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:b2:bb:f9:ad:da:7b:b5:5a:15:27:8d:92:
                    ab:b3:ad:26:12:5a:dc:72:c4:6f:86:b9:76:cf:13:
                    b5:99:ca:26:98:66:22:65:6c:94:1a:d2:1b:1a:f6:
                    23:ee:5b:a8:78:01:03:d1:03:5d:ef:20:8c:8c:eb:
                    1c:c8:36:78:85:3d:23:b9:80:70:12:43:21:79:6f:
                    63:dc:2f:2f:0c:f7:d6:48:0c:ee:68:f0:5b:bc:ed:
                    d0:00:fd:1c:7f:d2:f5:e1:5c:f7:73:07:66:65:fd:
                    16:c7:da:64:f9:3b:4a:7f:8d:c3:cd:79:6f:7e:3c:
                    e8:cf:83:d1:a3:79:49:48:74:1a:7b:5d:46:38:da:
                    89:c2:70:8d:ea:b1:fd:5b:7e:ef:d0:72:82:37:d2:
                    9b:e0:7f:00:9f:c3:c6:71:bd:6d:aa:07:12:b5:10:
                    36:d9:96:9f:f7:6e:a6:f0:54:56:b3:bf:62:e2:e7:
                    f0:40:0a:72:31:78:7e:e0:68:f8:11:b0:f5:80:bf:
                    90:cb:82:4c:45:c9:21:34:ef:b3:e0:26:73:23:1a:
                    d0:dc:46:1e:91:87:f8:c2:da:86:7c:b8:e6:1e:23:
                    91:dd:d6:04:80:77:eb:24:c9:03:3a:29:46:c6:54:
                    ce:08:4a:dc:99:b1:c5:e2:26:09:76:4c:24:7b:d4:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DB:A3:E5:8F:D2:3C:4D:B2:E8:CA:9C:3E:11:97:56:B9:D8:49:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:73:b6:b3:e3:bc:fb:f5:a5:a9:35:1e:03:b5:7d:2e:3e:
         cd:5c:f1:27:88:2e:31:f5:9f:2c:88:6a:32:47:fc:a6:94:ae:
         c9:83:7d:aa:d7:2c:0d:a1:e0:3a:d3:bf:80:a1:b3:ec:18:92:
         e9:be:57:1f:16:38:04:2b:b7:61:ee:a0:67:18:dc:fc:63:b5:
         d3:33:0c:e4:c9:69:56:d8:0a:78:ca:db:31:b2:78:3b:85:d1:
         a7:4c:25:a3:86:8a:75:47:3a:23:aa:bd:2d:2e:7f:b0:f8:3d:
         ed:4c:97:de:d0:98:99:bc:8a:86:49:b7:0d:9f:97:2c:ff:03:
         5b:02:eb:38:77:84:84:7f:39:c6:62:97:2e:20:b1:f4:d8:66:
         e8:c0:52:e6:e0:f2:6e:e0:e2:df:c1:84:b2:e8:e0:6e:4e:4c:
         66:d6:aa:43:c1:cb:e8:7b:3c:8c:c4:b3:37:4a:d7:05:64:4e:
         61:bd:7c:05:06:e0:ed:8e:64:78:47:88:3c:24:32:5e:c3:3d:
         b4:4c:25:d1:59:c4:1a:6b:d1:0d:60:f2:0d:e3:76:1b:5e:fd:
         5c:fa:e4:ce:31:f2:b5:f3:6f:44:ec:89:12:da:17:ef:69:a5:
         87:a1:5e:e6:07:0d:6b:db:13:4d:a6:0b:5b:49:33:26:a2:7a:
         09:61:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:00 2025 by rpki-client