Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/e39736e3-613d-38d0-9d44-a8ac410986a6.roa
File:                     e39736e3-613d-38d0-9d44-a8ac410986a6.roa (raw, json)
Hash identifier:          vUe7S662sOSiL8hET6m63E8i1bq3V4WaGwijqvxBw7k=
Subject key identifier:   1B:D7:97:CA:47:A9:E6:FF:0A:AD:D2:33:3A:66:99:D5:27:E7:F3:AD
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584AB650CE52E41E4160A57E8900
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/e39736e3-613d-38d0-9d44-a8ac410986a6.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     1299
IP address blocks:        2600:2600::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ce:52:e4:1e:41:60:a5:7e:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=0e66ae41-dbd2-404d-806d-95d75d92e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:ea:d4:7b:df:c8:32:2b:f6:16:14:c1:82:
                    9f:20:c7:41:d7:82:c3:bb:c3:ef:ac:98:04:de:24:
                    7e:da:4e:67:11:72:c7:fb:97:39:14:4e:c3:7f:66:
                    88:72:cd:af:51:45:c9:3c:64:2b:de:8d:1c:f6:61:
                    15:40:fa:32:67:6d:2d:e9:b9:7c:e5:06:8e:be:54:
                    cb:54:88:61:3c:83:8c:bd:b5:6a:75:4d:85:1b:df:
                    53:dd:d5:7f:50:2b:65:8e:a3:1f:c8:b3:16:85:47:
                    3f:36:c2:6d:84:95:4b:fd:d8:40:2e:fc:66:b5:cf:
                    da:72:d8:c9:70:4b:1d:50:11:98:0e:7a:32:49:cc:
                    49:50:e9:36:36:d3:9c:ed:f2:df:5c:15:71:2b:1e:
                    c0:f6:f2:22:d3:dd:6d:f6:4b:b4:c3:b1:d5:69:aa:
                    25:e4:bd:93:46:f4:e4:f1:c7:84:0c:e5:d5:47:1c:
                    8a:e0:9f:b5:1f:22:dc:7c:fd:6c:83:55:2c:9c:ad:
                    45:4f:35:44:72:d3:64:5e:2a:53:aa:c8:e7:39:aa:
                    66:a8:97:07:bb:fb:a1:92:6b:28:79:4b:ac:eb:67:
                    54:cd:ad:34:65:2c:0a:7f:b3:f8:8e:8a:3f:ce:73:
                    06:07:e7:e7:88:f9:61:fd:6f:33:af:72:ab:31:b9:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D7:97:CA:47:A9:E6:FF:0A:AD:D2:33:3A:66:99:D5:27:E7:F3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/e39736e3-613d-38d0-9d44-a8ac410986a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:da:2f:e3:e5:b9:a1:39:46:d9:f7:c9:cc:33:d8:e1:e4:
         b1:f3:c2:b3:cc:c5:b4:cc:58:d8:d4:5c:32:5e:3b:d0:70:5a:
         c8:ec:75:11:fb:07:0a:b4:ac:67:e5:d4:d1:35:01:45:b9:49:
         1c:5a:79:a1:aa:a0:f8:55:42:41:1b:91:27:0f:ec:e4:d8:2f:
         96:e5:59:a6:de:2a:e7:b6:98:2c:35:34:20:3f:46:35:54:70:
         3d:bc:06:7c:ee:03:4a:27:cc:98:0a:f3:f7:1c:4f:54:ff:a9:
         95:d1:9a:0e:79:c6:68:a7:e0:68:76:54:ee:8f:1e:8d:0b:59:
         84:54:ac:4c:36:a8:30:dc:b1:60:a9:50:00:66:b1:d5:61:a6:
         2b:c3:e5:d8:6f:8d:38:45:79:70:4c:4d:63:0b:05:57:ad:f9:
         74:0b:f2:2f:0c:81:a2:61:5d:c8:f5:a1:3e:c0:f0:bd:8b:f3:
         81:bc:d1:7e:45:54:ca:7e:b0:9e:f0:52:ff:00:e4:94:b8:a8:
         8e:e8:cf:ef:3c:0a:9d:28:40:f4:e7:1f:af:8a:69:e8:d7:7a:
         fb:b4:a9:f6:79:40:9b:a7:c7:6a:f9:97:1a:7a:54:a8:59:a5:
         9d:c7:fa:11:52:5a:7d:b1:09:2a:db:c5:11:6c:e3:ff:e8:94:
         48:96:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:06 2025 by rpki-client