Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa
File:                     eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa (raw, json)
Hash identifier:          RBR6Hp2WD4GCTxUFS63BO6s6Q2yGm3SUl50rIh8Mn0w=
Subject key identifier:   A1:FA:AB:20:4F:44:95:09:6A:02:A9:09:4C:C8:BF:4B:E7:FB:22:38
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584AAB26579CD49341F1D2CD8C80
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     22604
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:57:9c:d4:93:41:f1:d2:cd:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=ee5bfac9-1bd6-4f2b-9094-ffd28a581cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:78:20:9a:39:f5:37:42:dd:ea:76:b9:7d:
                    5e:1c:41:7a:ca:eb:3e:80:7f:88:b6:8a:2e:8b:8f:
                    6a:b3:ec:e6:eb:6d:dd:74:f3:0f:75:e2:52:01:9a:
                    38:47:d1:7d:a7:71:1f:6e:81:c9:8f:51:8e:12:76:
                    0f:ff:7d:c6:1f:27:72:48:e8:e8:f7:d4:84:65:b9:
                    68:0c:b2:e4:bc:84:12:56:8a:72:2a:c8:41:d9:5f:
                    84:52:54:f9:fa:eb:e4:7b:4b:43:81:e3:d9:17:1b:
                    23:a5:08:e6:93:76:f9:43:a4:f8:09:7b:4a:13:e7:
                    87:07:f8:b0:87:bb:27:1d:9b:cd:61:1d:3f:99:5c:
                    d1:a1:eb:eb:34:5b:1b:ff:6e:7d:68:20:9f:f0:31:
                    66:09:d7:eb:cd:83:3c:e9:c6:3c:11:c4:0d:e1:1b:
                    38:a9:24:1a:f6:58:d8:3d:54:e5:38:4c:5f:90:1a:
                    63:a6:9f:5a:bc:31:dc:d0:8e:47:fc:af:6a:91:9c:
                    e5:f9:b3:b0:b6:1c:80:21:2a:8c:ca:69:fd:1a:6e:
                    75:a5:54:57:d9:7d:65:73:72:a3:93:ff:d5:4c:95:
                    8b:c1:7a:b8:00:e7:8d:b4:16:dc:1c:af:6b:17:6c:
                    dc:9c:a1:d4:0a:cb:64:c2:b7:0e:df:fb:3c:c6:8d:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:AB:20:4F:44:95:09:6A:02:A9:09:4C:C8:BF:4B:E7:FB:22:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:96:01:35:a0:ef:32:1c:63:3f:4a:1f:c5:c9:0c:47:c8:42:
         2f:08:11:9d:57:1e:e3:7c:83:cd:e6:8f:72:13:40:b8:e2:55:
         e2:dc:bd:bc:dc:0a:d6:da:0f:07:2b:64:00:4c:ac:32:11:fd:
         d6:15:df:25:20:af:f7:ac:d8:94:be:05:7d:17:07:87:a8:ce:
         cb:24:45:58:be:23:1b:c5:2b:ed:14:0e:71:b6:77:6c:a9:a3:
         32:98:ae:8a:9b:07:c7:79:5c:f9:89:9b:e5:7e:3a:b8:0b:a0:
         58:75:39:e0:94:26:5a:dd:5b:27:e2:68:5b:3f:01:9f:89:65:
         b3:ab:58:48:0d:d1:b0:d4:78:6b:32:62:dc:5a:0f:f8:87:b0:
         ef:d2:85:5a:d3:a2:00:2d:69:b1:b0:e2:fd:45:1b:58:8b:eb:
         98:c4:db:c2:90:da:58:7a:12:6a:03:ba:11:0b:4f:9a:4c:d5:
         9f:cf:55:37:d5:90:ae:db:82:65:4f:8a:fd:57:06:74:28:cf:
         e2:f1:4d:2d:34:f3:17:67:c9:1a:f8:bc:fa:ad:82:7b:1d:8b:
         40:72:70:09:5a:4c:35:31:3e:5b:ad:22:16:77:22:84:9d:22:
         9e:ba:e5:7d:68:c7:93:db:da:08:00:c0:a3:a0:3b:c6:35:e7:
         cf:db:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:55 2025 by rpki-client