Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/83c84235-4dd8-3a33-b007-4f875563918d.roa
File:                     83c84235-4dd8-3a33-b007-4f875563918d.roa (raw, json)
Hash identifier:          +4dls3gsLw6j5Y/5dQBvA75Do2Sy9kezJCrb9gYtWEo=
Subject key identifier:   46:16:6C:F8:51:45:0E:50:1E:FD:A7:86:68:CC:97:3D:29:01:D3:22
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584AB4EB76D20DAC42BB44DC1740
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/83c84235-4dd8-3a33-b007-4f875563918d.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:672::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:76:d2:0d:ac:42:bb:44:dc:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8cc0f501-a89d-4e98-8617-10620921db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0c:d1:d1:96:b3:82:e1:8d:2e:4e:6a:ea:12:
                    63:fa:01:3e:bd:7c:6e:b0:39:de:c4:ae:78:6f:e9:
                    98:56:6d:f5:2e:4b:53:e8:30:21:04:d6:b4:d2:00:
                    07:eb:8c:f7:a9:c2:7c:42:0a:40:d4:6f:16:e0:8b:
                    87:61:bc:bd:f8:d8:c6:87:80:04:41:53:4f:3f:fb:
                    d1:f7:b5:97:1d:ed:bd:5f:59:bd:51:1a:d2:d1:58:
                    3d:9d:aa:5b:94:d8:68:d8:71:7f:e0:27:4a:5f:63:
                    b3:df:ba:58:75:11:45:f4:1e:55:d8:ce:e4:b8:65:
                    88:12:04:25:5b:37:0a:bb:0f:5a:3a:3e:98:3e:ab:
                    f5:b9:8e:6b:e4:ee:19:00:f3:75:e4:13:f1:5c:f5:
                    91:48:42:08:fe:5e:d2:82:c2:94:aa:31:c4:75:a4:
                    1c:9b:4b:ac:46:42:d1:f2:53:f3:c9:fc:7b:9a:ef:
                    22:a6:94:5e:28:eb:bf:a2:fa:8f:b6:09:8f:fb:59:
                    be:ab:14:37:50:23:cc:f9:ea:56:0a:21:3b:42:7d:
                    0a:84:08:48:54:29:9d:a3:9f:4c:c7:b7:a6:42:20:
                    71:76:65:2c:ff:6b:47:9b:ef:82:59:5c:fd:f4:ac:
                    09:15:8f:2a:22:22:c2:85:09:f4:3d:b9:40:99:e4:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:16:6C:F8:51:45:0E:50:1E:FD:A7:86:68:CC:97:3D:29:01:D3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/83c84235-4dd8-3a33-b007-4f875563918d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:672::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:de:11:52:f7:3d:b4:70:ac:7c:0b:48:81:69:56:fa:a7:
         24:4f:c0:dc:e5:1e:2a:28:6f:fe:06:55:be:88:e3:9f:d0:73:
         06:95:f4:c7:9d:e7:26:f6:5e:2c:3e:4a:c9:cf:39:8d:a9:63:
         5e:16:95:8b:30:6c:6d:70:9f:e2:4e:49:4b:a2:f3:fa:b2:cd:
         f6:b6:c5:f0:d0:a6:45:57:c7:cb:96:86:a3:1c:fb:91:01:64:
         97:f3:2c:60:dc:3e:28:a4:89:97:8a:6a:16:37:b0:02:f1:63:
         28:09:e0:35:15:ee:a0:d3:b6:a4:96:08:bc:cc:79:91:06:d2:
         a7:65:1f:ea:1b:9d:6a:1a:ea:91:9b:88:80:53:fc:16:ed:2f:
         c5:6a:31:4f:36:ed:13:d5:62:2c:29:e5:c4:10:13:c5:6f:d9:
         97:3c:a5:9a:43:b0:95:1d:b1:d6:2f:2d:a2:19:17:cf:31:79:
         9c:81:ba:d4:1c:dd:7e:af:d0:08:28:4c:23:8b:89:34:3b:c6:
         0e:31:b1:c9:be:b4:90:31:92:e9:77:50:7d:2b:f8:00:54:59:
         03:46:a4:35:a7:be:56:b9:8b:70:d1:43:80:c8:38:0c:43:c1:
         c2:29:00:9e:f4:83:ae:fd:93:2c:96:a2:77:4a:6f:81:94:ea:
         1f:19:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:20 2025 by rpki-client