Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa
File:                     a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa (raw, json)
Hash identifier:          u2RHhsC8CU7dqYeVX9sRbHi9pzWH82p29NQ7T8e0RoY=
Subject key identifier:   BF:08:77:7D:7F:36:E6:FD:40:E9:DA:71:25:4D:B8:10:C9:87:4E:7C
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584A74B5E317461A5E9DD0914480
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     21581
IP address blocks:        2606:7100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e3:17:46:1a:5e:9d:d0:91:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=7c901baf-7f17-4fbe-9402-ee956a77f01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:17:5a:8c:7d:da:e3:95:f3:d0:aa:8b:26:
                    2c:2f:31:6a:34:ab:89:66:ce:ac:86:12:60:79:da:
                    05:78:5c:d3:be:35:6c:85:97:1f:31:c9:cb:80:07:
                    c1:27:00:17:ea:db:d9:2e:0e:9e:bc:08:e4:f7:d5:
                    38:ad:7a:4a:a3:0f:dd:65:9d:d8:f6:bc:5f:1f:f1:
                    a7:23:5a:91:60:9c:1f:75:34:64:ac:60:95:3a:28:
                    3b:4d:95:7f:ce:be:a9:42:b8:3f:33:2b:2c:51:c8:
                    0a:4b:9d:a5:65:fe:cc:00:87:9b:a5:58:aa:30:79:
                    46:d8:18:d4:0a:53:db:0e:ae:66:17:92:fb:d4:63:
                    96:4b:7b:f9:58:c7:84:b5:3a:20:eb:4c:dd:bd:7d:
                    c0:fd:e4:cc:21:9f:61:a4:73:19:15:7a:9c:94:57:
                    d5:43:6d:5a:39:31:63:c3:8d:90:54:18:3f:cf:73:
                    82:7d:0d:9d:85:9f:a7:eb:46:c4:a2:b3:16:86:d0:
                    7f:5e:b0:15:85:86:0d:37:59:ea:25:0b:dd:04:71:
                    0d:0f:0b:68:a9:82:39:5f:89:0c:a9:a3:eb:9f:d0:
                    08:03:83:83:d8:82:2f:33:44:77:f6:38:62:b8:a5:
                    bf:76:6a:15:6f:10:1c:68:0a:6b:b0:c9:9b:b9:2f:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:77:7D:7F:36:E6:FD:40:E9:DA:71:25:4D:B8:10:C9:87:4E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:9d:4d:57:26:d2:40:8f:71:ab:1d:23:55:e3:91:1c:71:
         d5:0c:b5:05:77:09:72:74:03:86:5d:ca:2d:ba:26:64:67:3e:
         66:4b:13:9d:be:ac:3a:06:cb:2e:4a:94:37:9b:78:be:4f:b1:
         1b:df:2f:34:0f:ec:16:c8:3e:c0:f4:10:0e:36:52:ad:c7:5b:
         5b:3a:7a:6c:37:35:1d:68:87:29:87:bc:68:5a:67:00:2f:0b:
         be:be:4f:0f:99:90:98:ec:d7:d8:dc:90:1a:a6:7e:14:62:ed:
         a1:db:b0:d1:34:5a:4a:aa:a7:26:7d:28:d8:da:bf:90:25:8e:
         2d:21:64:b5:b5:a3:bc:1c:1b:59:88:74:9d:3e:60:ab:83:72:
         45:d7:9c:50:d7:e5:76:d7:2f:53:17:96:a3:e5:4c:4d:37:2d:
         e4:d3:1b:46:9e:b3:37:1f:db:1e:f5:60:74:41:5d:da:82:b6:
         69:a9:f3:8a:b5:90:08:ae:f6:69:25:bd:a7:2d:c0:a6:b7:ca:
         68:1f:56:99:a7:4b:30:a9:51:8c:63:05:48:df:18:be:f6:6d:
         ed:30:a4:70:28:e4:dd:e6:1a:5a:5d:d3:19:e4:33:d3:b5:e0:
         a7:31:98:ff:9e:b0:6d:2d:0b:1d:ad:67:1f:97:97:af:44:f4:
         1b:0b:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:07 2025 by rpki-client