Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/e426e52b-95de-3239-9590-a7ae392a7e1f.roa
File:                     e426e52b-95de-3239-9590-a7ae392a7e1f.roa (raw, json)
Hash identifier:          HrUhx80dJRc3HnQNVq9SqxuWAM2nFx/NwhgMjjs9ZQg=
Subject key identifier:   A5:88:40:D8:D1:32:BE:44:09:12:4B:ED:A6:1E:2C:89:2B:A6:3E:60
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584A89A62B7938A01160C1D71440
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/e426e52b-95de-3239-9590-a7ae392a7e1f.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     210576
IP address blocks:        2607:eb40:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2b:79:38:a0:11:60:c1:d7:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=4e8eb010-b5a2-4ad2-a28d-f6a6a2a3e8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:c2:7f:94:40:05:4e:f7:c8:11:c4:90:12:
                    a4:08:10:7e:33:d8:10:53:de:81:eb:0b:9d:35:83:
                    e5:64:71:a2:c4:7a:41:43:67:fb:6f:a4:a4:38:3e:
                    22:dd:9c:6d:ea:df:85:06:e0:3f:cd:b8:f0:b9:6f:
                    c4:e3:14:44:ad:fc:a1:8b:06:18:55:cc:07:03:b7:
                    1f:70:e0:ab:0d:12:3c:a8:4d:07:17:7d:a5:0b:16:
                    9b:49:d2:cd:a5:e0:81:91:f1:a0:c7:3c:c7:58:f8:
                    d5:6e:34:7e:77:ad:b6:69:46:95:38:77:be:c4:8e:
                    e8:a5:f7:78:84:a1:3a:74:97:d7:bf:4d:d3:8a:dd:
                    e1:b8:9d:be:61:3f:74:c0:0d:14:3c:b7:8b:e9:83:
                    fa:75:78:b2:83:12:89:6f:a4:aa:ad:53:7e:fc:f1:
                    ea:8b:18:59:33:c3:0e:73:58:71:38:4f:e0:44:64:
                    e0:7a:c1:e1:58:a3:07:bf:3a:32:fc:7f:79:e7:d3:
                    b1:5f:0c:f8:ad:ab:05:18:62:7e:7e:d4:f7:79:da:
                    94:54:10:21:9f:ba:68:72:21:03:81:a3:93:01:a4:
                    bd:4f:9c:f1:c2:c7:0f:b8:24:45:bb:c5:89:fa:21:
                    cc:8f:fc:46:ff:30:0e:1b:35:12:03:df:bc:65:bf:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:88:40:D8:D1:32:BE:44:09:12:4B:ED:A6:1E:2C:89:2B:A6:3E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/e426e52b-95de-3239-9590-a7ae392a7e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:86:dc:90:c4:97:50:7b:fa:cc:48:23:cf:94:4b:ab:44:2a:
         19:67:54:17:2d:e9:63:ae:85:f1:25:9e:30:34:80:c0:5c:a0:
         c0:e4:0c:d0:ed:24:57:b4:59:13:54:91:9f:3a:25:bc:42:c8:
         b3:59:a2:2e:3b:d9:c2:73:bb:c7:9f:6c:bb:92:54:a2:e1:cd:
         7f:89:58:c9:7e:ce:6b:d9:b4:b5:c8:77:9b:85:54:d4:c9:66:
         ac:5b:ce:31:82:4d:20:6c:45:00:7b:f9:9b:bd:59:53:c6:09:
         a8:a3:83:c0:a2:35:0e:5b:33:3a:8c:e5:02:27:4e:f7:33:c3:
         fa:26:fa:70:e7:e2:f7:f7:f4:af:ec:67:cd:66:c1:06:98:f7:
         0a:89:1c:50:99:14:d5:09:be:70:ba:41:9b:ee:33:d4:7f:5f:
         d6:36:41:24:b1:cb:16:e9:3c:7d:db:04:55:f7:67:ee:1c:9e:
         9f:3f:26:da:bf:09:10:9b:52:c8:e8:00:a2:13:6e:9c:44:19:
         81:4e:77:f2:1a:5b:d5:67:0e:a3:86:d8:54:e6:bd:30:f8:c0:
         03:1b:58:75:74:86:56:32:57:9a:9c:df:76:6d:ff:14:ac:db:
         f4:97:c9:da:ce:ee:8f:64:4a:c4:07:a8:05:86:9e:b6:5a:b5:
         63:3b:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:56 2025 by rpki-client