Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa
File:                     88d06485-5d98-30f8-83db-02c1cef141e4.roa (raw, json)
Hash identifier:          UVOgBlAyjye1+CTDt4Rp/XVoN6xmdZhmfyrMpsEdJYE=
Subject key identifier:   31:DD:8A:21:22:BD:4C:2F:1B:F4:1C:75:B3:F8:FE:A7:F0:CC:08:07
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584A5FC5E455A7109347566D3B1A
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     63240
IP address blocks:        2605:5d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e4:55:a7:10:93:47:56:6d:3b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=731f800d-555a-436c-9b64-333746454d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:88:ce:89:d2:8f:8b:8b:80:ff:7d:37:9c:
                    1d:6d:7d:26:07:c3:55:fd:96:6a:7d:41:96:1f:02:
                    81:dd:3c:11:e6:ed:fd:db:70:6f:bb:a2:2b:aa:8b:
                    03:0a:37:17:32:46:5d:0e:32:54:fb:0b:1d:1a:f5:
                    6a:ef:2b:26:1d:b4:1c:39:96:3b:73:3a:46:bb:b6:
                    81:b3:65:0b:14:b4:85:c2:06:fc:69:4e:ab:c5:fd:
                    7f:fc:e4:ff:e9:e2:8b:44:65:d8:d3:0d:17:b7:3e:
                    79:f4:4a:5b:68:69:c3:dd:01:8d:ac:98:2e:b0:09:
                    7f:04:4c:19:fe:64:4e:c8:d7:06:aa:49:df:77:38:
                    6e:95:15:91:c0:c9:a7:8f:24:a0:76:0a:1e:7d:ff:
                    9a:37:20:61:7f:ec:c5:ab:e9:03:15:2e:44:e3:8f:
                    51:a0:ab:fa:13:53:01:a6:36:3a:5d:a2:e3:53:61:
                    cc:53:05:cf:db:e9:3b:63:02:f7:2a:71:a1:29:80:
                    7c:c8:75:95:23:9d:6e:0f:2e:a0:23:d4:d1:0b:b2:
                    92:4e:31:eb:80:ea:db:20:ab:d7:2c:2a:8b:fb:64:
                    e7:35:02:74:a2:6c:81:3f:75:8f:c9:ba:c1:f8:e2:
                    ff:9c:c9:29:2d:38:0e:11:07:99:ab:09:e4:39:cf:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DD:8A:21:22:BD:4C:2F:1B:F4:1C:75:B3:F8:FE:A7:F0:CC:08:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/88d06485-5d98-30f8-83db-02c1cef141e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:ae:9c:fe:6f:b9:c3:2d:ad:49:93:04:7b:8c:6e:e1:a0:
         bd:88:ac:ef:78:b0:94:16:79:7f:ef:12:92:da:a2:e1:aa:1e:
         44:58:7b:ae:33:76:26:9d:39:38:24:01:33:1c:4f:c8:43:17:
         01:ff:a8:86:d6:c0:35:f1:6b:d8:08:9f:b3:b7:d8:ad:59:7e:
         dd:c0:9d:41:29:d2:bc:b0:02:7b:06:41:f3:a1:2f:0c:63:58:
         c1:fd:0d:bc:10:56:96:72:c1:40:41:dd:76:ca:1d:8d:5d:37:
         d8:3b:cd:aa:79:1a:ca:38:39:c6:3e:04:b5:32:88:9c:d1:d2:
         02:57:db:62:65:f9:83:89:ca:2b:e5:c9:85:3d:8f:f1:69:bc:
         29:dc:13:b7:5f:08:53:15:81:56:af:c5:3a:4b:e2:a0:06:4a:
         16:e6:4c:07:47:cc:9e:76:e2:75:5f:3d:81:9a:86:43:ad:41:
         5c:db:44:f6:88:75:36:87:b4:a0:de:91:cb:9e:f2:8f:67:c0:
         96:bc:ed:c2:c1:2a:93:42:35:7a:ee:bf:6e:73:f3:3d:c4:1f:
         9b:d7:ef:f0:d7:65:66:c5:07:07:77:42:ef:28:45:aa:b6:1c:
         06:65:a9:7e:fd:53:06:c7:d0:9b:fc:56:db:79:a2:62:33:65:
         fd:c8:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:34 2025 by rpki-client