Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
File:                     ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa (raw, json)
Hash identifier:          DOPZiuhCFEvJu9BnP0i5SJr+MSGtz75OH5Phv+sECsU=
Subject key identifier:   69:AB:98:6D:55:59:B3:6D:F6:95:82:1D:DD:CE:F0:CD:84:90:0C:AA
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584A86DB77783058CCBEA4FB7AE0
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:77:78:30:58:cc:be:a4:fb:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=24769470-5366-4c15-935c-0fb19047f6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:b8:53:57:8f:bd:4a:6f:87:28:95:20:2c:
                    ae:81:0a:ad:f6:bb:c7:7f:e8:22:78:ea:6b:dd:74:
                    69:6f:ef:1d:77:f9:d9:30:f4:ae:5b:fa:8a:e1:42:
                    6b:e6:d6:84:d5:a2:91:a7:f7:bd:3f:43:7d:7e:63:
                    de:1a:f9:d6:5d:38:39:a2:52:82:94:e4:d3:3d:19:
                    5a:90:4a:99:bb:65:9d:ef:24:99:f3:03:3e:8b:a3:
                    c9:bb:db:ab:11:3b:82:6c:e6:17:b7:5c:3c:de:bd:
                    f9:ee:b4:36:b2:11:96:f6:d5:27:7d:3f:41:8e:bc:
                    f4:3f:37:bd:fa:89:d1:67:38:c8:25:d7:bb:d5:20:
                    28:8b:9a:7b:a8:a1:17:c5:98:4c:e6:40:09:fd:db:
                    e3:1d:98:48:d1:2d:d0:00:6a:db:a3:95:4e:ca:8f:
                    d9:0a:f2:47:1f:f5:ea:0c:4f:ef:a6:0b:72:29:7b:
                    4f:fc:00:5b:37:94:6a:ac:56:8c:f2:83:1d:46:90:
                    57:02:47:44:79:06:21:4e:3e:e2:ac:b7:a3:0b:27:
                    83:56:f1:4e:db:85:f7:15:3a:3d:81:f4:f3:54:dd:
                    a8:3d:d9:e2:ed:9c:76:93:05:39:cf:4c:db:05:55:
                    12:80:bf:11:33:68:67:33:19:4c:d9:6d:c4:6e:2d:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AB:98:6D:55:59:B3:6D:F6:95:82:1D:DD:CE:F0:CD:84:90:0C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:32:bf:b8:93:51:dc:7d:1a:2c:8d:1a:87:fa:b7:4c:70:0c:
         71:b1:a3:6a:92:09:40:89:fb:33:c3:a0:c0:0a:4f:cd:7b:76:
         08:85:b1:1d:34:3f:6c:49:c0:a4:55:11:9f:f2:ed:97:a0:0f:
         ab:fc:13:c4:91:9e:7f:05:a9:3c:e3:e4:54:0d:4f:9c:5e:42:
         f3:d2:09:fc:82:44:89:3f:e2:f5:c2:d0:89:db:85:e2:c8:e0:
         9d:09:59:1e:41:ed:fc:dc:dc:2d:27:d3:c3:78:49:b8:6c:9c:
         3e:70:09:ef:5f:85:fd:52:da:3e:8c:56:1a:fe:2f:ee:6a:dc:
         02:c1:5a:b9:b4:05:fd:f8:76:04:50:f5:b2:d8:eb:e0:87:d1:
         db:66:87:49:67:c5:7e:ee:17:f7:e6:3b:2a:48:14:4f:74:5e:
         be:4c:b2:00:7a:26:42:ae:94:80:7e:dd:cb:16:ed:d9:57:38:
         59:46:90:58:8e:6c:95:35:43:75:10:3f:a0:5b:e5:1c:ad:8c:
         18:26:f6:e7:8a:90:9d:33:12:3e:8c:83:42:ae:4c:7f:48:60:
         7a:b5:46:54:3f:00:72:08:3f:0f:6f:6f:b0:0d:39:df:9d:f7:
         72:76:40:c4:3d:b7:34:e0:ca:b2:fd:3a:5c:d6:5e:be:0a:bb:
         8a:c5:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:41 2025 by rpki-client