Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa
File:                     dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa (raw, json)
Hash identifier:          bgyqHe/nfRgD6wl65McdrKhE6auk1BCFpoxVBaQW7Q4=
Subject key identifier:   18:71:DC:18:C9:B9:F6:25:9F:B8:F0:28:6D:57:35:2A:A9:3E:A3:87
Certificate issuer:       /CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
Certificate serial:       010D0C9F4328584A9636977FA672B331B3DF6BC0
Authority key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     3851
IP address blocks:        2607:fe78::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:97:7f:a6:72:b3:31:b3:df:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=5311c38c-76f4-4345-a1bf-ef055fed32a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:59:25:6a:f3:46:16:e2:3c:cd:9c:05:47:
                    8e:e4:68:68:f8:6e:c1:4e:cf:d7:bb:45:79:3e:a5:
                    87:78:0f:b9:48:88:b3:42:9a:b9:b5:35:7a:21:00:
                    fc:a0:cc:84:68:13:99:79:67:3a:80:a0:fa:32:4b:
                    7e:c9:de:2f:a7:4f:3a:58:b3:47:ea:8b:b3:33:4a:
                    c1:af:9c:ae:57:9d:f8:2f:f0:65:0e:8e:34:9b:12:
                    6f:39:a2:80:9f:79:df:3b:e9:4e:af:67:23:fa:d1:
                    79:6d:f9:72:d4:67:94:2b:2a:7e:53:93:e8:05:9d:
                    a8:12:a1:12:c1:86:ab:d5:43:7b:b3:32:1e:52:98:
                    79:14:6c:7d:76:4a:8d:02:55:08:c0:55:80:9a:6a:
                    0b:02:94:1b:13:3e:e4:54:84:f3:88:7b:8d:4b:ed:
                    1b:5f:4f:e2:d1:77:64:1c:db:98:d9:fa:fd:7f:fc:
                    97:ab:d7:ea:93:6a:71:62:85:b7:59:08:ac:0d:4c:
                    3b:29:32:70:cc:64:13:fa:76:0c:c6:e1:7c:4d:76:
                    6f:64:e9:58:75:28:09:90:d4:02:c2:a3:05:54:01:
                    10:81:bf:b2:6c:03:9c:5a:0e:5e:b0:af:d5:b2:47:
                    3b:d1:a2:f3:37:a2:de:a3:e4:c5:3e:45:e2:47:f0:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:DC:18:C9:B9:F6:25:9F:B8:F0:28:6D:57:35:2A:A9:3E:A3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl

            X509v3 Authority Key Identifier:
                keyid:17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe78::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a1:87:59:89:47:05:da:29:cb:13:f1:24:b9:4e:d3:e0:b1:
         f9:e6:14:0a:2e:ad:2a:6a:70:e6:40:1f:59:0a:eb:65:d1:73:
         b8:b9:3e:ce:94:ed:bd:a3:88:14:c8:86:98:57:f4:48:30:72:
         46:dc:8f:6f:82:14:14:4b:fa:4a:b0:b1:b3:9e:8a:b9:75:85:
         2f:62:94:fb:f7:22:4a:95:31:65:20:be:95:20:c5:76:a0:fe:
         0d:64:cf:fa:ea:7b:1a:72:fc:21:00:dd:19:b1:6a:a2:d9:65:
         97:72:b5:96:0f:5d:b6:8c:9c:05:8b:7a:c0:18:92:a6:9e:21:
         e4:4c:19:97:84:96:4d:ff:67:c5:bf:91:62:29:9d:f7:b9:97:
         73:20:2a:98:95:13:f8:e0:db:33:39:c9:7f:0a:ca:cd:ab:72:
         8b:62:2d:33:99:af:79:ac:c5:25:2a:b8:89:3d:42:c8:bf:54:
         13:76:38:81:83:e3:89:27:24:cd:38:5b:60:81:8e:84:b9:5d:
         1b:74:3f:95:50:53:60:03:f6:93:d6:6e:15:00:d7:74:8d:d2:
         54:46:d9:d2:f2:39:61:db:15:4c:f2:00:26:58:d3:0b:9c:08:
         5a:55:c0:d4:53:4a:93:5c:40:39:89:f6:07:ea:78:43:62:40:
         81:01:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:03 2025 by rpki-client