Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
File:                     d7ad6731-f801-334c-8c41-a45799fc4e01.roa (raw, json)
Hash identifier:          AS0By6n/pDkniAoILl6mY1qW44XxIQyfQkZM4HVT5BI=
Subject key identifier:   61:BF:3C:4B:A7:61:77:85:08:CD:D4:EF:45:D8:C6:BE:18:90:0C:28
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F43285849F87A89A0AD809D6BBCAE6AC0
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     400544
IP address blocks:        2607:76c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:89:a0:ad:80:9d:6b:bc:ae:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=e0ef8c29-7cc0-4928-8d3a-250b16a9fc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:cd:aa:b2:fe:88:cb:00:3e:ad:b6:8f:b6:
                    78:c3:80:03:e1:54:2b:83:3e:6b:69:dc:3a:fd:2c:
                    a4:51:7b:f2:01:9a:14:2f:9b:7f:91:34:5d:72:47:
                    3d:ee:53:ef:bc:ae:23:cd:60:06:de:88:67:8a:30:
                    00:cd:94:f3:a6:43:7c:71:0b:7c:df:01:90:8e:36:
                    28:8b:ce:2b:15:aa:e5:80:d1:bb:9d:ed:f2:f0:c8:
                    88:ee:c4:79:dd:cb:46:15:5c:bc:29:18:9e:c6:62:
                    a9:2d:03:8a:31:27:1f:af:d7:42:fa:92:7a:8d:64:
                    c4:38:ce:f4:bd:00:a5:89:e0:d4:42:ad:6e:7d:48:
                    bc:3e:5a:e8:5d:13:b6:45:46:a8:53:35:82:fc:b6:
                    61:91:b7:59:2d:fc:d8:43:b6:0b:fb:da:65:e1:21:
                    85:f6:35:75:39:2c:3e:53:12:02:30:33:7a:37:c1:
                    c8:27:b0:b4:88:9b:4a:1c:11:3e:5a:24:20:9a:2f:
                    fc:a8:01:69:55:d2:ce:00:0a:f2:13:85:32:a2:59:
                    75:bd:89:90:11:20:d3:a5:ab:a1:f0:2e:26:ac:d4:
                    97:3b:bd:99:ca:e5:d7:57:21:fb:c3:d0:31:73:03:
                    fb:1f:f5:b6:5d:2a:82:22:cd:6e:dd:90:46:25:33:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:3C:4B:A7:61:77:85:08:CD:D4:EF:45:D8:C6:BE:18:90:0C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:09:40:20:5c:1c:9e:0b:00:33:35:51:42:36:e9:a4:c2:
         2d:47:fb:dd:27:1e:42:86:c4:24:4c:ed:2b:20:0b:c2:8f:c2:
         25:c2:e4:d2:5f:57:3f:47:c8:a6:1d:34:9a:b0:08:a2:ae:b8:
         e2:c4:c5:9e:d6:d9:23:da:09:98:63:e9:1f:79:c0:19:66:d2:
         6f:4c:2a:19:6d:e0:69:4d:af:47:ad:c6:1e:58:c4:3a:14:18:
         03:03:b6:c3:3c:70:67:8e:da:fa:d2:35:49:cc:ed:11:01:fc:
         5d:93:54:cf:66:c2:dc:f9:02:04:2c:59:e2:83:82:ca:c8:66:
         61:3e:4d:46:53:54:68:93:bf:4a:9e:11:74:3f:1c:17:3f:49:
         bb:18:d5:4a:f9:2c:9b:93:48:6f:80:55:44:e1:29:61:47:58:
         50:44:42:90:cc:c3:44:aa:31:14:02:fe:30:12:c8:49:c6:bb:
         06:a4:08:5b:14:32:99:67:14:d4:d4:ae:dd:cb:09:79:6a:07:
         c8:f2:67:79:a6:ab:d3:1a:95:a9:09:b6:7a:0e:b1:03:a7:dd:
         62:3d:cb:a6:02:62:2c:b9:68:15:e2:af:8f:57:71:05:a6:65:
         bc:3c:09:5b:6f:90:6b:2a:84:4b:1d:52:22:fd:e7:05:22:f6:
         9d:bc:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:42:17 2025 by rpki-client