Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa
File:                     5fc86629-60c1-318d-b809-f69eff095ccd.roa (raw, json)
Hash identifier:          3QpxBTm2eAU4imI1l8HAd/a8CErm0/MTZg+bxJDrq4o=
Subject key identifier:   79:69:D7:97:29:B9:C2:50:46:45:77:D1:E1:BF:1B:9E:B6:B2:98:28
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A0F92A026B820023AE1CCCC80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa
Signing time:             Mon 02 Jun 2025 19:33:19 +0000
ROA not before:           Mon 02 Jun 2025 19:33:19 +0000
ROA not after:            Sun 31 Aug 2025 19:33:19 +0000
asID:                     271
IP address blocks:        2607:f8f0:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:92:a0:26:b8:20:02:3a:e1:cc:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun  2 19:33:19 2025 GMT
            Not After : Aug 31 19:33:19 2025 GMT
        Subject: CN=eef72524-b3fd-4736-b204-0a8a7f0a54b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:c4:0e:0c:fa:3b:4f:9d:39:fb:e6:49:15:
                    39:a4:4c:25:8e:62:9c:a6:a1:c7:d8:93:fb:6e:5f:
                    03:3f:82:39:c8:04:4e:e6:b4:a3:58:f6:65:58:e3:
                    8f:ee:b1:cb:64:7f:c4:ff:64:ad:19:2b:b6:8e:76:
                    9c:56:1e:26:3a:ba:d3:e1:07:ae:cb:05:d5:72:05:
                    9b:36:d3:3f:b6:3d:6b:2f:df:80:46:f6:ea:6e:59:
                    20:9f:02:fe:1d:f8:f8:e0:23:86:c8:ee:14:d6:f1:
                    c8:86:65:4f:50:f8:9c:ee:54:9f:62:21:7c:11:d4:
                    16:af:51:94:f2:59:12:58:13:66:3f:d5:b1:31:fd:
                    bd:de:8d:9d:85:d7:ab:86:00:6c:89:0e:fe:8d:da:
                    04:69:f5:87:b8:9f:86:76:b8:60:a1:d3:25:ac:ca:
                    4b:55:82:10:d1:9b:b4:c6:26:59:91:50:98:7c:6e:
                    f0:6f:2a:1e:97:ec:62:e1:e6:08:de:7f:c2:ef:f3:
                    b3:dc:a7:bd:ea:5a:b2:3e:20:5f:3d:8c:88:8f:69:
                    6b:a4:a8:b2:a4:14:6c:98:11:2e:7a:0a:f6:24:66:
                    b6:40:20:ac:59:d9:fe:db:88:2a:0c:26:17:5a:26:
                    60:cc:7e:ad:ec:8c:d8:4e:07:9c:e0:aa:3c:5e:2c:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:D7:97:29:B9:C2:50:46:45:77:D1:E1:BF:1B:9E:B6:B2:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:1c:bd:3e:bf:d1:73:49:8b:dd:8a:4a:40:b9:11:4a:13:
         93:f7:8b:44:ef:ab:25:7d:70:f7:b1:07:29:87:94:a6:f9:02:
         60:07:c5:40:de:8c:06:1e:84:2d:33:08:a5:51:da:e4:c6:5e:
         1e:be:fe:d2:dd:ea:fb:ab:33:48:38:bb:87:73:eb:d2:9e:c4:
         46:53:ed:c4:ee:32:82:4a:11:c3:ca:8c:85:15:70:eb:89:23:
         3f:b6:70:97:71:ab:e5:b0:1b:c4:52:99:10:eb:19:7f:b6:81:
         82:85:7b:55:43:5f:9c:bc:e6:89:de:a8:52:14:67:28:f2:7e:
         74:fc:ff:d7:d4:41:4b:70:f9:cd:2b:d4:86:9f:c9:06:df:cf:
         2b:16:50:54:df:aa:c8:21:1d:51:5e:93:e3:6f:f6:5d:a0:29:
         98:68:20:b1:a5:a9:d0:cc:d3:6d:8e:43:1c:68:0d:83:fe:a6:
         07:fd:e1:f6:09:29:a0:2a:b3:67:ac:a3:9e:3c:84:5a:05:cd:
         b8:e4:ef:e1:ce:90:95:28:b6:5f:36:5a:a9:06:11:43:bb:87:
         40:fa:05:4c:ab:0e:55:7d:ab:4a:fa:38:b0:e5:95:3e:3e:7f:
         a3:ca:d4:37:d1:f4:55:27:32:d3:63:25:83:3c:f7:a2:6a:50:
         2c:8a:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:15 2025 by rpki-client