Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
File:                     df71ebf9-f641-3f00-b880-4b494a56937e.roa (raw, json)
Hash identifier:          l0IUV/DdZBCdquCzLvxRJEXBTrg8EU+YHRMwhVxGZwQ=
Subject key identifier:   BB:29:6E:0E:FC:3B:47:38:E8:17:64:20:CE:38:D4:B1:EA:54:C0:61
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F4328584A2D857E356622B6F674259630
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     16717
IP address blocks:        2607:d580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:7e:35:66:22:b6:f6:74:25:96:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=c62b18ef-a7ea-4603-972b-c7750f3879e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:d1:99:11:53:fe:65:cc:4e:e3:21:ae:c5:
                    61:73:6f:b7:a3:1a:c2:46:62:69:52:ca:d0:3f:70:
                    ac:b6:76:0e:f7:82:1e:f2:f3:72:0b:0f:ae:f3:9e:
                    48:1b:d8:77:f8:21:7a:aa:e2:14:3c:48:bd:6d:e8:
                    cf:ae:95:eb:87:03:d0:85:14:17:67:b3:d4:47:04:
                    f6:33:31:02:45:55:fc:e6:c7:af:b7:0a:cf:6c:6d:
                    3b:f4:f9:8c:d2:de:5c:4b:65:fa:9d:8a:18:dd:d8:
                    3c:10:f9:ab:eb:6e:da:d2:2c:13:9b:ea:96:db:e2:
                    8d:a1:12:87:22:1c:0b:c1:f9:87:24:da:c3:56:9b:
                    36:00:17:95:72:c0:89:ec:29:04:0d:aa:ff:21:94:
                    1a:de:9d:a7:a7:2a:85:c5:bf:c5:4c:41:66:4a:f0:
                    52:be:3a:bf:7d:79:2e:07:d1:b7:61:0d:d8:04:7a:
                    8a:2e:f4:b0:94:f8:71:68:b7:ef:17:ac:6b:f2:9e:
                    5f:87:8d:fc:7c:b8:9c:2e:24:d9:58:bf:be:73:a3:
                    11:58:97:b3:f8:15:81:0e:8e:4a:a9:41:46:f3:45:
                    29:30:f0:20:9d:92:b1:bd:44:d3:fa:bf:27:62:19:
                    fa:db:c0:ef:4d:cc:d9:04:f5:8d:22:97:6d:69:8c:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:6E:0E:FC:3B:47:38:E8:17:64:20:CE:38:D4:B1:EA:54:C0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:67:ed:ce:af:1e:6a:17:f0:52:32:4b:fd:41:6f:c3:95:
         92:0d:d6:ca:e6:16:cc:89:cf:fe:d7:05:22:f0:82:ec:45:d6:
         88:78:18:ac:74:39:e8:bf:e2:55:1d:fe:2a:f4:28:c1:ad:5a:
         d4:bb:7f:aa:a1:db:6f:9d:9a:b8:34:46:11:d8:9b:bd:df:1b:
         3a:40:59:6c:cf:f3:84:0c:0a:63:49:24:77:35:07:70:a2:67:
         06:d7:70:fd:79:84:24:7c:7b:f8:73:60:eb:cc:b3:b7:9a:8a:
         e1:56:b8:09:a7:89:c5:8d:cd:ec:55:ee:2d:16:7e:f2:ee:33:
         10:cc:28:d9:06:e1:e7:c5:1f:8b:8c:d0:01:2f:4c:2f:a5:46:
         1c:55:41:cb:78:c4:01:ea:9b:cd:56:e9:35:e5:ba:b6:91:fd:
         c9:e5:4c:25:ce:c8:e0:49:9f:8b:60:d9:53:d6:c8:9d:89:f3:
         b9:1f:16:b9:7b:d8:0a:80:d9:87:55:4d:9c:a9:86:e2:d4:e5:
         12:e7:bd:56:2a:5f:8b:c3:7c:c6:f7:ef:99:e5:d6:dd:30:bb:
         4e:ff:69:3d:9d:f6:56:cc:4c:ff:bb:81:85:2e:05:93:c3:ae:
         1c:aa:82:97:18:5a:9b:83:65:7f:b3:93:68:e7:94:bf:50:e4:
         3a:0d:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:11 2025 by rpki-client