Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa
File:                     a17a91df-764d-3274-b083-cf6f640c2e29.roa (raw, json)
Hash identifier:          j8G/oQIhS2gLAfA2ED/+jZJ5bww3e7E9HFrDSbbMM8w=
Subject key identifier:   6B:D1:F4:D0:74:DD:E3:93:D1:3D:F5:7B:3F:5A:AF:2A:67:D7:A9:36
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584A74B5E2F5B627CD28A075E100
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     21581
IP address blocks:        2606:7100:1cab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e2:f5:b6:27:cd:28:a0:75:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=f9a639a5-18a7-4f58-9656-43f86fc4169a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:76:64:65:39:ab:cb:53:01:d7:52:d3:a8:
                    87:57:46:69:41:5e:97:e7:48:81:d6:a7:63:ac:7e:
                    41:29:67:cf:46:ab:1d:42:e1:79:39:8f:b1:2a:7a:
                    5c:94:5e:7e:e7:a2:dc:b2:86:e6:cc:43:41:e4:2f:
                    29:d5:d4:89:38:04:8a:67:70:50:07:75:53:e6:13:
                    5f:9c:ab:da:49:77:e5:d4:f3:7d:14:e2:ca:4f:56:
                    f1:55:a9:d5:06:29:62:55:cc:de:62:39:81:b1:f8:
                    09:44:42:39:9d:c8:bf:78:6c:f1:c8:ce:b0:c9:66:
                    53:15:f5:70:62:d3:cb:1a:01:60:20:c6:b8:52:ea:
                    7d:0d:9e:ce:b3:4c:fb:66:8e:14:75:ab:99:6f:92:
                    7a:22:37:2b:c8:c0:28:7a:a4:99:2e:2a:dd:3e:01:
                    65:36:c3:63:7a:cb:84:b7:70:0c:ad:32:88:fa:b1:
                    34:c0:fa:dc:79:b4:3d:c3:ff:61:34:e3:20:6e:e3:
                    d7:5c:f0:f0:67:d7:5b:8a:bb:b6:6a:21:aa:2c:5a:
                    cf:97:57:f8:73:7b:04:c5:e1:62:bb:b2:3f:aa:60:
                    67:ca:08:11:e8:95:2d:ee:dc:9d:6f:5e:d6:29:68:
                    40:ba:21:74:8e:9d:d9:58:3c:0f:63:04:4d:c1:7c:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:F4:D0:74:DD:E3:93:D1:3D:F5:7B:3F:5A:AF:2A:67:D7:A9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100:1cab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:f7:e6:4a:33:56:61:ea:f9:82:82:c1:f9:9e:08:dc:13:
         41:fc:69:9e:21:54:51:bb:35:42:7c:f0:1f:b7:57:0f:60:14:
         08:c5:13:c2:03:3f:6c:35:40:4a:22:da:66:63:9c:b9:c5:37:
         4c:a1:06:b8:df:5a:38:1b:79:f7:06:ee:55:06:ac:90:31:58:
         97:90:f7:82:03:3a:2d:64:fd:e4:c0:e3:b4:45:da:5e:ca:5e:
         ed:90:f7:c0:b5:9b:ad:85:d5:67:38:f5:74:2c:6e:09:74:76:
         62:41:57:7d:f6:a2:89:2b:19:a7:5e:32:30:62:0a:d0:ab:d5:
         5b:68:91:fd:ef:47:90:02:d2:68:3b:5a:e1:e0:ef:98:bc:21:
         e5:fb:58:79:c8:ee:b6:f6:67:4b:5a:8d:59:7e:b4:31:87:56:
         9f:dd:a9:a0:79:f5:65:bb:12:94:0a:a7:8c:ee:0a:ee:8c:f8:
         99:0c:aa:c8:22:69:26:0a:9c:53:3d:8e:44:e1:f5:99:ba:77:
         fc:48:b1:f2:43:31:aa:bf:cb:ee:5d:d4:a4:f7:63:5b:6c:50:
         ab:80:d1:00:78:bb:88:24:87:97:a1:95:d6:4e:ca:3f:8e:c0:
         1b:d5:9c:24:fb:73:b8:5d:d1:e1:67:f0:08:4b:3f:21:f9:b0:
         5e:e8:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:47 2025 by rpki-client