Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa
File:                     bac625e9-9cde-3855-93cf-42285eddadcf.roa (raw, json)
Hash identifier:          h0DFZe1S+qZqPPT/NCPq3DRuisOX2okyl5bCNA+moJs=
Subject key identifier:   CB:2A:A8:2F:B5:8B:9C:34:28:7F:E0:88:38:2E:EC:95:29:1F:DD:C5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594F1B0322E2D2492F7B480
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     28753
IP address blocks:        2607:f5b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:f1:b0:32:2e:2d:24:92:f7:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=0b5be99a-6723-40c0-82d5-8b7baf6f2c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:cb:8a:5c:2c:ad:c3:4b:d8:97:f1:fc:84:
                    bc:58:88:c6:18:a2:42:9c:2b:f8:12:ca:fc:9c:93:
                    dc:cd:63:03:0e:a5:94:49:3a:2f:76:69:7d:a2:ad:
                    12:28:75:02:cb:8e:a0:d5:0e:28:38:e2:41:48:2e:
                    6b:80:77:2f:16:78:5d:55:7b:ba:39:04:b5:08:86:
                    88:01:4d:6e:aa:13:b3:24:7e:58:9a:f1:f0:8f:53:
                    61:92:7e:09:4d:ed:a9:5c:b4:95:08:fd:cc:c0:d5:
                    fd:4b:16:6a:bc:2f:00:ca:59:b5:1f:4d:1e:07:69:
                    c1:d2:d2:42:64:ed:40:0e:8c:96:1f:1b:c0:90:d6:
                    85:49:c0:9f:2f:cc:ec:0c:67:ea:d9:22:cb:b2:50:
                    65:cf:14:ac:ca:86:f7:6a:76:ee:79:81:f4:12:7f:
                    f3:2c:37:ec:ae:44:dd:93:58:5a:33:ba:f9:52:5a:
                    e3:e9:65:04:92:78:63:44:77:19:f9:84:cc:4c:de:
                    8b:3e:e2:98:5c:9c:d1:68:7f:f7:18:30:64:57:5c:
                    05:35:16:bc:a0:dd:84:eb:fb:6a:ed:68:b3:1b:03:
                    b6:59:83:8b:21:3c:63:5d:c4:ef:92:1f:01:02:ea:
                    19:af:ff:1b:e7:b7:f7:59:d3:84:a9:f3:31:0f:e0:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:A8:2F:B5:8B:9C:34:28:7F:E0:88:38:2E:EC:95:29:1F:DD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:a8:70:14:ba:26:d4:b5:ac:10:f4:d9:e2:94:eb:35:55:
         88:0e:03:c3:ab:c0:ea:c8:55:55:5b:b9:2f:f5:76:f7:59:a4:
         8d:a3:64:12:48:64:51:7d:6e:6c:1f:6f:67:b9:cb:da:77:8b:
         1a:33:3e:e6:91:bc:9b:97:0d:6a:3a:65:ca:0d:75:e5:74:fa:
         4d:2e:94:c5:29:53:e0:7d:ec:3f:61:9f:3b:59:f5:b9:ac:5f:
         f9:4a:67:49:49:aa:01:33:d9:98:a3:58:9e:39:8e:c5:ea:d0:
         b2:94:b3:aa:05:50:4c:6b:b9:c4:2c:54:a8:04:71:c1:4e:12:
         2d:5f:97:a9:90:22:af:d2:0e:bc:f2:ba:1e:2c:82:b9:59:20:
         5d:22:61:6f:42:89:e5:e8:ba:14:fa:b2:86:30:fb:f4:4a:c6:
         d3:4d:1f:ce:23:16:c5:56:e9:13:5b:be:16:6e:1f:07:5f:c7:
         d6:70:54:e9:31:d3:c0:f4:45:67:5b:63:71:6f:11:94:67:62:
         e2:9c:15:31:28:f2:4d:78:28:72:b5:f4:a0:76:10:94:76:a0:
         12:7a:41:80:30:cf:a2:80:33:aa:3c:69:dd:3f:53:93:99:9e:
         86:f1:00:15:30:b7:2f:61:6d:a6:cf:0d:ac:83:c0:ce:0b:b3:
         6a:fc:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:11:32 2025 by rpki-client