Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa
File:                     c76cf674-7ae1-309b-b202-b2e206711325.roa (raw, json)
Hash identifier:          5FFQLTS/tOJyA4hSJakc29f2rTcT30+Y3/7q40ZbSW8=
Subject key identifier:   9F:0E:F3:FC:47:6F:5A:BD:31:4F:30:6E:15:89:C8:D7:45:55:87:87
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F5ACBA59A1D654AC6AD0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     59253
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f5:ac:ba:59:a1:d6:54:ac:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=f46fea0c-3da8-4296-bb6e-adebef5013d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:d7:40:11:46:7f:03:7e:24:b1:af:a9:34:
                    2c:53:d4:a6:ad:b3:a8:2f:1e:22:79:27:6a:fe:d7:
                    db:b9:63:e0:12:fd:f5:25:3c:a6:04:62:39:ec:fd:
                    8b:26:3c:5e:4c:ef:6f:c5:0d:2d:dc:eb:7f:7d:28:
                    41:98:49:0e:3d:de:6c:70:46:c7:e7:c9:43:b9:2a:
                    00:bf:57:9a:6d:a3:30:6f:73:fd:6a:ee:e3:cc:ec:
                    56:cd:e6:19:89:9c:4f:cf:a6:be:5c:de:3c:27:32:
                    1c:f5:f7:f2:7a:aa:ae:c8:a5:11:e4:e1:08:6b:84:
                    46:12:88:e5:12:93:47:65:74:cb:61:a3:3b:1c:26:
                    5e:2c:f9:7e:22:a8:1d:2a:70:94:12:c3:33:9d:19:
                    cd:73:a5:c7:26:42:d6:bd:f8:a8:6e:e4:d7:6c:82:
                    fc:c9:1c:39:d1:82:97:fb:80:4b:8d:6f:33:30:03:
                    2d:ce:89:42:00:c3:ea:fc:21:8e:67:ea:97:c7:5b:
                    f7:a9:27:93:54:cc:11:ca:e6:c6:1f:7e:14:7e:22:
                    19:c6:4f:b7:ab:e6:97:2f:ce:d2:8f:5e:e8:05:27:
                    52:b9:00:c4:fa:89:e5:01:ad:cd:11:04:ed:b8:1f:
                    41:94:34:54:a6:99:41:ff:f1:7d:61:a0:39:c7:65:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:F3:FC:47:6F:5A:BD:31:4F:30:6E:15:89:C8:D7:45:55:87:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:56:01:03:c8:c4:30:ba:a4:ce:5e:83:81:b1:27:10:35:
         8b:05:36:91:c3:9d:b5:69:1c:25:89:e5:23:f0:b1:9f:44:dd:
         67:32:80:ae:76:7f:85:61:10:83:1b:6c:f8:e0:77:e9:ec:88:
         f6:71:9e:b2:8a:90:80:31:08:ea:9c:ca:8b:76:d5:22:ec:50:
         4e:4d:f0:e8:63:d4:28:03:6b:05:36:f8:f2:f1:ac:7b:e9:6d:
         73:f6:bd:3c:61:42:ff:f7:5c:dc:1a:13:20:5e:12:4d:57:9e:
         b9:86:4e:57:0c:b3:b0:1d:b0:25:66:39:67:08:67:b0:f0:91:
         f1:16:e5:da:3d:9d:a2:4f:8f:49:13:b3:e6:d5:0d:7f:0e:a9:
         7b:5f:40:0c:07:95:ad:07:cd:d2:3b:5b:9a:cb:ab:01:5a:ce:
         dd:88:a9:e4:55:1a:b6:1c:59:64:59:02:8e:d7:99:c5:9c:3d:
         0a:66:71:47:4d:c8:09:af:7d:5e:54:f2:4b:32:e9:4e:d9:b6:
         40:f3:e3:3f:0e:30:ae:0a:11:b0:1b:37:7c:c5:d8:67:25:2a:
         40:33:47:78:5a:4e:b4:7e:85:fe:1c:d6:e6:62:0d:b4:04:26:
         40:89:d6:de:17:f7:3b:5b:be:cc:dd:4b:f5:bc:0a:af:4b:c9:
         93:10:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:14 2025 by rpki-client