Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa
File:                     d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa (raw, json)
Hash identifier:          yrqzAf3d8mxSNZYQy0EUcydbfLLu9aGBncLsJKQf+vQ=
Subject key identifier:   47:09:03:63:90:ED:50:98:68:1C:08:1A:71:EF:89:E0:C8:53:9F:B6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841193C85D769BD7076AEA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:93:c8:5d:76:9b:d7:07:6a:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4281f93d-d99d-4195-943a-137b5a2db627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:a6:98:7c:23:f1:f5:fb:04:98:32:ea:81:
                    e5:74:bb:a6:0f:40:f2:26:14:13:ff:41:d1:f0:d9:
                    92:40:fa:35:20:82:58:d0:77:ee:59:5c:fd:dd:62:
                    89:52:4a:d9:11:a4:7a:bc:09:1a:08:e0:8b:ff:30:
                    1f:d6:0a:ef:3b:ef:d9:f5:7b:e3:39:4f:4e:09:04:
                    a0:4b:35:f8:16:b3:1a:5d:8b:0e:13:ff:a1:f6:bc:
                    25:5d:fc:ec:bd:f3:2d:de:c2:f8:e2:03:e3:fa:b3:
                    a6:82:0e:e5:b4:b5:68:39:4a:01:fe:4c:ba:fe:d8:
                    44:76:87:fb:d7:63:e7:dc:de:aa:c5:5b:8d:40:18:
                    64:f8:ef:66:7d:bb:28:4b:3b:a5:ae:f7:b2:f0:d7:
                    c1:e8:7a:ba:2b:f2:83:ce:b7:36:fc:88:cf:91:91:
                    63:2b:3b:e9:3d:a2:f9:57:f7:91:10:7b:63:f3:a8:
                    c8:44:3a:4a:9a:56:72:3d:aa:57:c9:4e:96:73:b7:
                    e9:bf:61:a8:52:73:34:1e:5c:ae:16:42:89:c9:df:
                    bf:e2:55:f4:f7:31:ea:c2:4e:df:bf:31:24:93:c8:
                    28:9d:95:92:77:8c:20:61:7f:f2:77:d1:ce:10:f3:
                    2c:44:ec:e6:87:f8:97:f3:d4:d0:5e:11:ea:5c:3c:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:03:63:90:ED:50:98:68:1C:08:1A:71:EF:89:E0:C8:53:9F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:86:dc:58:20:66:43:25:3e:c5:74:e4:60:8c:e3:07:6f:
         1d:08:ef:06:63:c4:62:13:9e:3f:34:3d:75:45:cb:8a:47:78:
         bd:e0:9a:7a:36:33:2b:56:df:2d:db:c3:03:a8:b2:44:46:f5:
         38:cf:dd:2b:fd:ae:65:62:c2:fa:d4:c0:2e:3d:85:58:5b:4d:
         fa:07:1c:43:60:eb:dd:26:35:39:ca:fe:08:62:a4:92:b7:92:
         2d:3e:c1:89:81:f0:52:29:b4:7e:d4:81:b1:aa:3e:b8:40:e8:
         08:ee:e1:3e:f6:e7:fc:1f:00:a1:9a:92:6b:be:57:cc:4e:3e:
         a0:c7:5d:b7:71:1e:e8:32:1d:29:0d:ad:45:3b:dd:0a:8d:0a:
         17:f7:56:0b:52:f4:c6:ad:2a:bd:76:6a:2e:9c:b0:49:8c:0b:
         8d:ed:b5:e1:34:d4:45:7d:49:7c:28:27:2a:f1:04:c1:f7:51:
         e1:32:db:40:cf:db:8a:bd:48:75:9f:60:d6:a8:b1:f9:48:79:
         dc:03:da:dc:52:ec:14:da:38:ef:fb:a7:8e:85:76:8a:ba:5c:
         21:77:5e:24:d3:35:27:92:eb:f3:c3:ad:7c:2c:90:aa:ba:56:
         82:a6:2a:5e:5d:44:b4:19:c3:0e:5c:28:10:a0:5c:01:c7:df:
         ce:15:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:32 2025 by rpki-client