Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa
File:                     14225c85-02d7-3302-b9fc-e26bf7888e33.roa (raw, json)
Hash identifier:          MkuOdu+an08z/HOe1SUFEzfPmwHg8rIWAGK5vS0fR8E=
Subject key identifier:   33:0D:2B:67:DE:46:4C:F4:03:36:A8:1D:70:1B:07:A2:EB:9C:D2:C2
Certificate issuer:       /CN=8def8532-8491-4ca2-9370-4768f22df42b
Certificate serial:       010D0C9F4328584A8575EB14F5321356EA5EFC80
Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     36305
IP address blocks:        2604:e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:eb:14:f5:32:13:56:ea:5e:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=7be0f5ea-be63-4904-9f9d-5ed37ce861cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:2d:ab:9c:75:c0:60:0b:75:af:b0:27:e3:
                    f6:70:48:75:52:0c:77:3f:26:77:26:09:90:2e:50:
                    86:83:1b:9d:b3:5f:0d:3e:7c:df:3c:bb:57:a8:06:
                    29:77:df:d3:87:19:42:2a:88:1e:13:53:ef:29:c6:
                    f8:f4:58:b8:b8:e6:46:f5:a4:63:ac:ed:32:13:cf:
                    2c:ee:ea:c8:c2:11:da:19:7a:ab:8a:e0:bb:b1:fb:
                    61:f9:43:32:33:3f:7e:83:18:8a:dd:1f:d9:8c:a1:
                    0d:7a:3a:b0:41:43:6a:39:5a:c3:a1:53:28:8b:e5:
                    12:fc:3e:96:a2:f2:14:45:3b:d2:c5:b8:e3:10:31:
                    aa:45:ed:66:f7:e5:9c:52:f9:75:8f:db:55:61:ef:
                    cf:45:eb:9d:0c:31:d5:bc:67:1b:a7:03:71:fd:37:
                    3e:c2:af:db:07:f7:7a:5c:4c:e4:e1:b7:a4:8d:fb:
                    a4:75:cd:26:1e:64:4d:f9:54:5b:e5:7e:ee:85:2b:
                    50:45:06:d4:c4:08:7c:b9:a3:a9:5e:3e:4b:26:d0:
                    9b:18:e7:b4:c8:ef:d5:23:57:15:0d:7c:1a:b0:b8:
                    6d:ab:07:68:93:99:50:90:0f:5e:22:2b:9c:47:e9:
                    54:0f:0c:ec:42:81:a2:fc:52:6a:70:0c:31:5e:06:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:2B:67:DE:46:4C:F4:03:36:A8:1D:70:1B:07:A2:EB:9C:D2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl

            X509v3 Authority Key Identifier:
                keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:9b:d9:41:8b:91:d0:80:a8:f3:a6:e5:cd:04:30:20:89:ad:
         af:67:8a:82:04:f0:df:8a:e9:fa:f3:97:53:05:96:4e:a2:df:
         82:00:21:2f:81:29:75:e6:0c:90:18:5b:bc:d4:3b:78:a6:7a:
         3d:b7:5d:49:3c:0a:6b:31:62:78:7e:b4:9b:13:37:b0:07:c7:
         1c:54:61:74:13:93:23:4d:d7:d6:b5:03:50:df:60:47:a1:fe:
         07:3d:e8:53:89:b6:9b:b9:8e:a0:16:70:c0:84:cc:c2:f4:2d:
         b1:56:8d:26:c7:f0:b1:d8:fd:15:17:fe:b9:fc:0e:e0:e8:ca:
         e8:3d:8b:d7:49:04:6d:59:42:3a:ea:f1:b0:00:21:a6:e4:fc:
         30:5c:58:3c:8d:dd:d6:09:88:e8:71:75:13:89:90:ee:f5:41:
         63:d1:69:20:d6:6f:6a:3d:71:9a:c6:02:6a:b1:24:61:8f:21:
         46:07:d2:33:e0:c9:1a:fc:f0:eb:86:8e:51:13:b6:f0:bb:32:
         87:6f:40:ab:66:b5:f1:c6:18:3b:ac:79:40:b4:12:45:0e:30:
         59:4d:cb:77:2e:ef:b7:0e:d8:4e:83:d4:81:be:09:5f:0f:b8:
         f2:57:50:a1:ce:24:ca:e5:02:4b:70:b0:fc:16:8c:38:4a:c4:
         c3:ae:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:39:54 2025 by rpki-client