Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
File:                     a26963c2-c1dd-33b2-942d-0b6b92224b05.roa (raw, json)
Hash identifier:          UxzQpT6wz/xVHwufLAyuEd7BiNjQXEf9W+/CKXTt1Ss=
Subject key identifier:   A5:27:58:E6:50:86:5E:DD:58:F2:A2:2B:DC:85:7F:D2:0D:74:33:7B
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584A2ABAE0378D6062EF58F95680
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2631:2000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e0:37:8d:60:62:ef:58:f9:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=a4c82859-5c4a-4439-9ed9-0ff313bbd9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:c9:89:33:8e:b8:61:9a:79:aa:26:24:37:
                    29:f7:4d:be:29:2c:4c:37:44:80:97:a5:bb:4d:f6:
                    32:f0:25:54:0e:9b:82:73:7a:43:ee:0e:9c:c2:d5:
                    1d:6c:20:df:78:7c:10:c1:d3:f2:ae:f0:17:58:58:
                    ed:ba:26:ff:ce:28:de:6e:9e:06:94:bb:7b:fa:d1:
                    83:f8:42:d5:bd:f6:a7:74:e5:17:41:a5:cb:05:f9:
                    e4:94:c0:01:49:9f:eb:70:53:9c:a7:b3:8e:2e:59:
                    42:e9:a5:27:9e:fa:31:52:30:9a:94:50:c2:a0:19:
                    2f:64:f9:f4:b2:34:4a:55:98:95:70:72:e3:07:5f:
                    77:64:0f:af:cc:29:65:65:4d:e1:04:d4:bc:85:bd:
                    b7:f0:c7:91:15:30:b0:b6:6a:ed:a3:3a:90:50:1e:
                    47:64:e8:c1:ca:33:e3:e0:42:9e:e1:ed:ba:03:54:
                    88:6c:ee:3f:e1:ea:6e:23:8a:7b:f2:67:74:72:1f:
                    f9:85:1f:f9:fa:f4:49:c5:0e:f6:c8:2f:2f:43:3a:
                    76:9b:e9:f6:22:85:85:ee:38:10:83:47:0f:81:9f:
                    bc:04:cc:c3:fd:7d:b5:a4:b6:f9:8c:34:e2:b1:47:
                    9b:59:98:64:aa:9d:8c:8f:46:dd:3c:d0:a1:25:e1:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:58:E6:50:86:5E:DD:58:F2:A2:2B:DC:85:7F:D2:0D:74:33:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:15:ef:e5:4d:54:73:42:81:fb:3f:90:b5:fc:87:55:da:76:
         67:e4:e1:c7:1e:bf:3d:47:f6:d7:26:69:fb:41:ba:81:ee:1b:
         92:d9:47:09:36:ba:2a:6c:1f:b3:ee:07:c6:29:a9:11:6e:0d:
         a5:dc:90:d2:63:71:c4:81:89:48:e3:88:04:aa:0f:be:32:f9:
         aa:88:41:12:c3:59:b2:79:57:aa:48:a7:25:3b:5b:84:1a:43:
         73:cf:7f:35:0a:be:8b:a5:58:83:b1:e3:55:35:0e:42:31:47:
         9f:4c:f6:32:ec:02:7d:f5:14:70:9f:4f:50:1e:06:a9:ef:97:
         61:6e:15:f7:0d:96:31:68:7a:9f:88:f3:60:d3:6d:a1:4d:ee:
         95:a4:18:d5:7c:cb:0b:6a:a7:c2:1f:2a:15:ed:6c:b9:63:52:
         9f:ae:1a:24:a5:9e:82:41:f9:05:74:b0:69:56:54:b0:95:98:
         9f:1e:36:d2:61:e2:c2:23:ae:ba:a9:c8:bc:74:5b:6d:ae:ee:
         f6:f9:20:81:91:27:d6:2d:93:70:65:79:5e:10:e9:c1:5a:21:
         9d:34:f3:db:aa:c2:20:c1:18:a8:48:8b:c7:78:d2:a3:a8:b8:
         37:bb:0e:69:2a:f3:b9:04:97:a6:29:6e:3b:bc:65:15:40:f7:
         e7:e7:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:11:53 2025 by rpki-client