Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
File:                     f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa (raw, json)
Hash identifier:          6Hzcu61czDTqUUzYVwziIzAGS7is+s+haH6ZACyFwMs=
Subject key identifier:   3F:3C:3E:D4:72:85:E3:CB:B2:4A:79:B5:09:38:2A:57:DB:3E:AA:01
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584A936B5884849F1BC6C462BF80
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     65012
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:58:84:84:9f:1b:c6:c4:62:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=b3bbca98-bf4b-4c15-8caf-b1d580ff6f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:45:1e:28:0c:47:37:17:02:6e:26:19:b5:
                    53:11:2e:3c:00:61:06:31:9f:f3:38:5d:3e:f1:52:
                    57:d5:b6:15:9b:84:25:56:91:88:7a:e1:5f:2f:40:
                    46:de:b5:aa:ba:b4:b9:07:68:14:c8:dc:d3:43:a8:
                    c8:85:c0:80:84:ce:10:31:38:20:38:54:f4:51:40:
                    e1:cc:4a:da:a5:68:b6:f7:52:f7:c9:aa:57:09:1b:
                    c0:89:1a:42:51:54:cd:6c:7f:85:12:b7:0d:ed:fb:
                    1c:1f:74:7b:ab:b4:78:36:c3:e9:d0:9c:61:fd:9b:
                    96:16:40:36:14:3e:99:03:23:d3:03:cd:4d:e3:5f:
                    fe:6e:9a:b3:c8:74:84:bd:46:ba:90:41:d8:c2:7f:
                    13:1c:ee:af:ee:1d:0a:02:d0:b1:eb:54:12:4c:87:
                    2e:8f:6e:ef:f4:f2:84:a7:1a:56:66:5a:44:0a:98:
                    17:60:30:48:e0:01:74:c5:75:f2:dc:58:57:27:26:
                    80:0a:89:27:ae:3c:8e:b9:c9:a4:00:1f:ec:e8:0c:
                    df:59:6b:bf:62:12:79:a7:e0:8f:ba:69:a6:7b:6b:
                    00:45:e0:0f:e4:20:27:27:83:4e:33:c5:a0:0e:ba:
                    4f:31:9c:19:4f:28:f2:76:da:51:f9:5b:95:86:9a:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3C:3E:D4:72:85:E3:CB:B2:4A:79:B5:09:38:2A:57:DB:3E:AA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:d8:7b:0b:7f:2c:f9:df:f3:98:de:3b:4c:5b:0d:1a:90:
         5b:d9:be:e8:ca:3e:b9:be:d3:f4:0e:51:61:68:98:46:e0:86:
         61:f0:16:c2:b6:b2:d8:56:1c:86:74:6f:63:37:c0:76:48:80:
         11:be:12:04:02:aa:82:e4:fa:f4:45:d5:a1:b4:6f:01:a9:a4:
         f8:7e:b8:bd:2f:84:ec:27:15:ef:0d:80:12:0b:90:02:26:43:
         b0:48:c3:b5:8a:35:a2:a7:4e:c4:a7:d3:33:e8:ee:06:e8:2f:
         4a:5c:34:7d:03:8b:70:13:f8:73:e0:80:63:68:49:9d:51:3b:
         5f:1b:cf:14:79:7f:e3:6e:c5:e4:4c:c8:ef:c9:c3:9f:16:be:
         b7:8f:d6:8b:2f:da:f5:08:36:99:6a:52:7c:1c:d7:75:60:5f:
         ce:9e:c7:d8:35:70:72:24:d6:4d:c8:e3:23:5d:25:df:07:d2:
         76:be:44:88:57:9e:33:15:a2:4f:eb:b8:0b:89:69:83:a5:b6:
         a7:c4:f4:a0:14:fa:97:d4:5c:89:02:3a:b9:7e:54:77:3b:63:
         58:33:cc:6a:b1:80:02:de:d6:6b:c2:b6:11:cc:9b:0b:63:fc:
         15:d6:51:89:ea:2d:a5:29:e1:92:7b:36:4f:52:67:7b:3c:d8:
         ef:11:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:46 2025 by rpki-client