Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa
File:                     3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json)
Hash identifier:          Z3SniZUIUXsO/Hjyq4jfkqXhMMjkfRQ92r71FXshImk=
Subject key identifier:   79:10:61:42:DD:AB:0E:5B:16:21:80:29:66:06:81:DE:5B:C7:73:DA
Certificate issuer:       /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
Certificate serial:       010D0C9F4328584A9A662BF6BCEF33C8A9CA7600
Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     18604
IP address blocks:        2604:1a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2b:f6:bc:ef:33:c8:a9:ca:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=0491b988-1ffa-4137-baa1-2dc94fc3169d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:5a:3e:25:85:5f:fa:f6:f4:60:9f:30:4d:
                    93:d0:0c:30:29:8e:cc:b4:56:35:55:09:fd:b5:6a:
                    40:b2:88:26:8c:f2:fe:21:5c:af:45:25:fa:a0:5c:
                    42:36:0a:79:5b:1e:62:85:b2:48:48:f9:72:28:34:
                    e1:fd:ec:d5:f7:5c:e3:b6:a1:58:e2:77:a1:35:3a:
                    98:f4:52:61:4a:18:8a:9c:91:66:eb:b1:be:46:21:
                    8d:cf:48:49:4f:71:92:10:45:f6:23:2b:18:d5:6b:
                    79:56:ae:6b:f5:be:4b:93:69:63:b3:b6:7b:58:6d:
                    1a:5a:bc:02:40:5b:fb:05:89:fc:04:7e:b9:d3:5c:
                    be:c7:cd:7b:9a:54:42:cd:e9:da:9f:86:4c:9f:d0:
                    7b:41:33:4e:66:91:10:e6:6a:25:ee:fa:a5:b2:74:
                    9c:25:63:56:5b:ff:00:49:9a:ee:5e:6a:88:cc:21:
                    49:70:97:84:3e:98:ad:85:8f:0f:bc:bd:cd:3d:d4:
                    92:41:6a:fd:b8:59:30:5e:5f:b2:d9:15:7d:50:0e:
                    4b:42:a1:81:95:21:9b:84:8e:d8:ab:ba:8d:d4:f1:
                    08:8b:98:fe:de:89:c4:e1:34:b0:80:65:ca:ab:dc:
                    54:f3:76:38:62:e9:01:05:4d:5f:7a:ea:26:63:5a:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:61:42:DD:AB:0E:5B:16:21:80:29:66:06:81:DE:5B:C7:73:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl

            X509v3 Authority Key Identifier:
                keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:51:12:d1:62:3c:c9:0e:9e:e7:0b:d3:7f:fd:a6:9d:8c:cb:
         57:71:cd:19:af:da:af:f1:ff:9e:07:4d:73:59:1d:45:c0:18:
         c7:22:9a:76:d6:6f:07:2f:30:f3:c4:19:d6:dd:fc:6d:f5:0f:
         d4:55:95:9a:61:50:1a:2e:5f:65:8f:11:f3:7e:94:70:27:c1:
         34:2c:d5:6a:10:62:6e:3e:7b:56:83:b5:60:f7:b5:cd:f2:d9:
         01:65:fb:96:fd:0a:95:d9:a2:87:f6:71:77:be:be:c7:c4:ac:
         87:33:fe:bf:06:02:b2:54:16:19:5a:78:eb:f2:9d:8a:49:6a:
         c7:cf:9d:2a:c2:1f:35:b3:73:21:2f:90:d9:dc:ba:6f:5b:59:
         cd:24:f0:af:c6:c9:0d:58:6f:d4:bc:88:36:e6:ae:e4:2b:32:
         b5:3e:fd:02:51:7a:ba:b6:ca:5e:91:77:ae:15:e9:e6:13:0c:
         b2:88:84:a7:66:e6:b2:7d:a1:26:7b:bc:22:78:03:b8:d6:44:
         ae:20:c3:c5:15:d3:49:fe:eb:ba:26:bb:82:68:28:f1:5b:54:
         95:38:51:30:f9:25:9d:57:bf:45:d3:af:ba:12:3f:23:12:50:
         68:f2:c0:29:02:35:36:de:ed:ac:4e:a7:1e:12:d0:d0:ed:73:
         08:2b:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:02 2025 by rpki-client