Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/04e8769d-b428-3c7a-bed3-abbe9f035fd9.roa
File:                     04e8769d-b428-3c7a-bed3-abbe9f035fd9.roa (raw, json)
Hash identifier:          jH/2r+OX33eTIVaFUvCkEqhy9SRHBnbfUAGQXpVYOUQ=
Subject key identifier:   EE:F3:F3:31:24:57:E4:6B:64:32:89:4C:3B:9F:F3:D2:A5:E8:90:B5
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A11B53C18C2DF972115D9C290
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/04e8769d-b428-3c7a-bed3-abbe9f035fd9.roa
Signing time:             Tue 03 Jun 2025 13:54:40 +0000
ROA not before:           Tue 03 Jun 2025 13:54:40 +0000
ROA not after:            Mon 01 Sep 2025 13:54:40 +0000
asID:                     271
IP address blocks:        2607:f8f0:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:b5:3c:18:c2:df:97:21:15:d9:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun  3 13:54:40 2025 GMT
            Not After : Sep  1 13:54:40 2025 GMT
        Subject: CN=96ae3ea4-7820-4b08-b47d-9357dbde0fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:a9:7c:cb:c4:a0:44:0a:b6:72:bd:94:35:
                    bc:30:5d:42:4f:7c:65:ed:c9:14:4e:e9:b8:79:8d:
                    95:eb:ba:b6:13:dd:c0:04:7e:5e:9b:4e:ea:80:42:
                    b9:95:a6:8f:7b:06:8b:6d:e4:78:44:b5:f8:20:12:
                    de:9e:4a:75:7d:a8:da:30:b5:e2:78:88:f5:e1:a6:
                    a7:5e:ba:cf:ab:53:67:13:87:3d:4f:49:f8:76:67:
                    d3:1c:dd:52:60:48:70:d8:4d:39:61:d5:10:cd:d9:
                    ca:b9:73:6a:92:20:e6:86:f1:13:7c:dc:2e:78:c3:
                    01:ea:27:d8:c7:fb:4d:44:a6:9f:95:63:9f:03:8b:
                    eb:fe:a4:44:66:a5:3e:61:f3:08:72:c5:b6:56:3e:
                    5a:fa:91:5b:ff:67:c0:b7:8c:3c:2d:68:4f:79:d0:
                    a8:e3:30:bd:2f:d0:1e:f1:92:62:89:9b:b8:d0:8f:
                    0e:e0:84:50:f4:e5:02:ff:97:e1:3d:cc:33:02:1b:
                    db:ec:06:00:17:45:35:f6:c9:e0:0c:11:92:77:11:
                    88:0d:50:30:92:fa:ab:60:a0:98:2b:69:2a:48:4b:
                    da:11:b7:3f:d8:ee:e5:d9:6c:cf:6d:39:a5:a3:98:
                    22:e3:26:ec:9b:fd:83:28:48:78:b8:78:fd:e8:df:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F3:F3:31:24:57:E4:6B:64:32:89:4C:3B:9F:F3:D2:A5:E8:90:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/04e8769d-b428-3c7a-bed3-abbe9f035fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:58:1f:7e:93:2f:d1:fb:2d:cc:98:e0:c8:c7:14:ad:e9:8c:
         1b:54:79:9b:c7:cb:76:2b:71:05:5a:0c:46:96:b5:ef:43:80:
         a5:ee:52:67:f7:48:3e:37:d1:aa:2f:a4:0f:c8:f9:a4:62:fc:
         ac:ca:24:b8:8c:8f:85:47:98:f7:45:67:5d:6a:10:51:2d:24:
         66:91:90:9f:14:34:e4:69:86:46:b0:7b:f6:78:94:d5:01:e2:
         5a:66:de:fc:39:84:fa:49:3c:1d:6d:a8:89:26:76:61:2c:7a:
         6f:74:2b:d3:7d:29:18:15:c0:5f:c2:8f:f5:43:90:fb:9b:12:
         4a:bd:51:b7:b7:c6:ff:7e:42:36:c6:f4:1d:d1:5d:d9:b1:90:
         2e:94:1e:55:d4:60:3a:0f:6a:01:8e:d3:98:7a:5b:7f:1e:d1:
         52:da:62:91:34:53:04:88:75:c6:0e:de:dd:87:df:cd:eb:53:
         c2:04:36:ca:a8:85:d2:a9:92:20:a6:71:5a:f8:83:1b:08:bd:
         47:38:67:67:83:93:c4:b3:7f:ce:b6:32:f8:59:71:92:af:42:
         f2:79:06:58:1c:07:ec:52:c6:d3:6b:11:34:90:a7:9a:26:41:
         c0:37:a1:d9:36:5c:64:0a:b9:4d:a2:bf:b6:b7:d0:a0:08:ca:
         84:c7:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:25 2025 by rpki-client