Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa
File:                     381c74d2-a63e-3218-af39-42c9efe0a48b.roa (raw, json)
Hash identifier:          VVVMTKshjgazlNGenYBsgTgcquFsF08nf+WFkfumg84=
Subject key identifier:   AA:FC:88:5C:54:ED:45:0F:36:A2:43:9C:7F:1E:83:70:ED:93:89:30
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584A90A0A57F9C820CD2C0569980
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     21782
IP address blocks:        2605:af00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a5:7f:9c:82:0c:d2:c0:56:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=10a8b53a-d3c7-4159-936f-0eabfd38d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:ff:27:57:f9:09:31:66:7d:40:40:66:c5:
                    a8:3a:86:f9:03:3e:d1:d0:94:02:02:a5:f6:a0:7f:
                    c8:23:ae:42:cf:cf:18:7b:c5:21:57:ca:16:8d:b3:
                    36:74:36:7c:71:00:1a:46:ca:29:16:13:08:bd:40:
                    ca:c6:0a:94:64:73:bf:84:b3:f0:21:af:0d:f8:19:
                    97:db:b9:88:15:b4:7b:a2:7a:5f:85:1d:75:2a:95:
                    ee:79:c9:56:09:b0:4d:a7:e4:ef:f2:60:bf:74:78:
                    5a:5b:5f:95:85:d0:7b:36:63:36:a3:15:a1:a5:5a:
                    22:c9:cf:6f:c5:82:b8:38:4f:ac:ab:f9:0c:20:61:
                    38:dd:db:38:82:78:3c:fb:ae:30:05:a2:f3:93:40:
                    ab:ce:e1:2d:57:da:15:c6:af:d9:ff:7c:07:61:7d:
                    cc:46:8a:f2:29:47:51:69:3a:af:35:90:eb:4d:38:
                    3e:e1:c8:54:b1:dc:51:5d:05:70:63:f0:06:4e:76:
                    28:71:0e:a8:5e:58:52:8d:ca:db:82:21:14:d9:c9:
                    94:4e:2f:8d:8c:6e:5f:90:3a:5b:6e:a1:98:46:75:
                    8d:39:54:30:7b:b9:d7:dc:2c:9a:76:58:39:24:fe:
                    c7:ec:70:a5:6c:d7:85:7a:4f:93:29:3d:4d:b5:4b:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:88:5C:54:ED:45:0F:36:A2:43:9C:7F:1E:83:70:ED:93:89:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:af00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:78:7e:e7:40:8c:c4:b0:8c:fe:c8:10:86:0d:90:72:75:
         f3:10:6b:7d:0e:40:c0:0a:dd:87:22:77:6e:64:10:e5:76:7a:
         0e:fd:3f:2c:89:d7:be:f5:5d:a8:80:b5:9f:7b:94:65:07:22:
         85:97:3f:24:65:34:36:1d:f6:e0:f8:c3:fa:15:c5:61:f8:8f:
         41:b5:fe:00:86:29:d0:7f:14:7a:0a:6e:7d:43:8e:ea:b4:39:
         8d:32:a6:1c:2a:07:c0:d0:b0:91:48:df:a9:6f:92:cf:f2:db:
         32:d0:dd:f0:c7:5e:12:1d:ce:f7:c9:ad:69:fd:aa:c9:58:91:
         d9:49:8e:ae:bc:fa:aa:9d:91:6c:69:6e:2d:d8:ff:d7:e5:32:
         d1:8d:aa:e8:b3:b2:c9:00:6d:f0:be:41:4f:83:8f:de:cc:22:
         fd:cf:be:0d:de:9d:6d:58:42:40:9b:17:a7:f7:3b:8e:24:e0:
         88:23:fc:fe:84:44:43:28:39:5a:c4:55:29:30:53:a2:b6:69:
         95:5d:e8:82:25:4b:d0:48:34:ac:60:a5:ad:15:d3:fc:a7:fd:
         88:0f:6f:31:e3:48:f1:a4:a6:69:c1:46:0e:9e:2b:c1:82:e0:
         ba:c3:6a:65:6d:7f:1d:b4:f6:22:b0:7a:9a:40:95:03:25:4c:
         90:d2:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:25 2025 by rpki-client