Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa
File:                     9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa (raw, json)
Hash identifier:          cigy3BWOkC5vyDoW1ArVURXEJmo3Qvub7LHxXu/HNYg=
Subject key identifier:   E8:25:BC:77:06:96:0C:16:47:0A:26:40:F9:F0:69:48:49:64:E5:FD
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F4328584A7A4B38F6C6B1AFD96DD1BB80
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     14464
IP address blocks:        2604:a700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:38:f6:c6:b1:af:d9:6d:d1:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=6a5f707b-5105-4133-96e7-8508e48709f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:87:42:11:f8:5a:e6:12:90:17:fb:dd:48:
                    85:8e:95:09:84:ab:3b:86:d9:14:e8:14:06:b0:d7:
                    82:94:77:b6:68:cc:e7:a7:68:bc:a4:53:1d:33:e6:
                    14:66:64:77:dc:ce:41:ac:0e:c6:76:db:57:78:d4:
                    ab:8b:58:11:61:a7:78:8e:a5:df:1c:d4:2e:4a:58:
                    fc:e7:27:45:0b:6c:7f:7e:df:58:5f:91:67:c2:0d:
                    51:b4:54:fc:37:51:bb:ab:65:10:d0:44:6e:80:6d:
                    d9:37:cd:2e:35:0a:61:23:84:b1:f5:7e:54:19:29:
                    5b:da:93:46:c3:2a:42:86:f2:96:6a:2c:c4:e6:fa:
                    b0:b9:2e:fe:10:13:55:f6:0a:86:44:97:ba:f0:84:
                    c1:bc:a2:8f:0a:c2:c0:9a:41:7f:25:02:3f:39:df:
                    8c:bd:f6:e0:a9:26:c5:85:01:4a:ed:7f:de:2d:26:
                    70:4d:4b:87:26:08:8c:d0:47:06:c9:a5:af:45:fc:
                    ab:26:86:5e:7e:c4:b1:19:81:63:31:c9:1d:8b:2d:
                    5f:ed:3c:62:50:e7:27:9d:4a:35:a5:22:bf:f6:e9:
                    ac:bc:30:7b:2c:ad:e2:e7:b5:a1:04:63:0e:32:d2:
                    c4:d5:f6:45:e3:67:08:65:9c:47:bc:d3:7a:67:a7:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:BC:77:06:96:0C:16:47:0A:26:40:F9:F0:69:48:49:64:E5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c6:c6:be:f1:45:7e:9f:98:bc:d8:82:55:12:2c:1e:c1:31:
         88:c2:d7:b7:06:ee:49:58:63:84:2c:2f:66:8d:14:e6:a2:0a:
         1d:cc:b1:52:b6:40:2d:76:d7:cd:05:24:9e:73:5f:11:34:88:
         51:8e:08:82:25:d1:49:69:fa:fc:a7:9b:89:f0:84:13:5b:93:
         e4:30:ce:fc:bf:e5:f4:78:5b:6d:0a:e0:52:1d:6e:ab:ac:eb:
         93:58:02:b9:51:de:15:9e:3f:67:fc:18:aa:15:a3:c8:b2:fe:
         45:45:08:97:23:82:a4:1f:9e:73:38:3c:24:7f:90:7e:7a:26:
         96:f9:6d:dc:61:7f:30:83:21:92:ae:e6:68:e8:a8:51:bb:14:
         f9:02:47:6c:97:39:79:65:1b:ed:e4:9c:84:42:13:8c:59:8a:
         b4:fd:4a:23:af:9e:a8:c7:c1:3e:41:cc:bb:58:de:09:0a:1a:
         24:4d:72:cf:f9:86:d6:d9:56:75:6f:9e:fd:c8:d9:23:ed:35:
         71:f6:9e:89:3c:16:6e:26:7a:71:9c:b9:b0:42:a3:58:93:7b:
         71:fd:63:cd:01:0d:05:a4:a9:fe:82:17:0e:83:07:b7:19:18:
         83:21:d1:db:e4:02:b2:a6:06:7a:99:60:4b:86:7e:db:ba:2e:
         83:25:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:24:06 2025 by rpki-client