Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
File:                     7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa (raw, json)
Hash identifier:          AXYccJfwfg9h+BZhdfwwqy9LNStM6SGALsAzE0i+Nyo=
Subject key identifier:   89:A8:96:40:33:A6:F1:86:43:C0:38:4C:CF:07:2A:77:4E:5D:39:BC
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F43285849DC8FBB0AC7075B39550FEA00
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     397894
IP address blocks:        2607:f4a8:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:bb:0a:c7:07:5b:39:55:0f:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=68d7d17c-fab7-41c0-80aa-9affcbe1a963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:7d:3f:61:ca:49:5f:02:6a:f8:dc:ff:df:
                    8c:bb:1b:ef:8c:9b:c1:fb:14:04:a0:cc:a5:0a:9b:
                    3f:2a:75:4c:af:73:74:f2:13:58:eb:07:5b:be:a4:
                    86:5a:7b:f7:07:23:44:fa:6d:94:ba:53:79:5e:3c:
                    79:c5:4a:6f:c1:19:75:46:34:4a:d9:c5:e3:aa:d2:
                    7a:55:ea:08:49:eb:7c:b8:d8:90:fb:71:cf:ff:7d:
                    f3:2f:b9:1b:5c:57:f9:fa:58:2a:cb:5b:ca:a9:84:
                    5d:85:63:fe:55:f4:f9:00:c1:a2:12:4a:5f:dc:3e:
                    c8:7d:2e:3b:9b:87:18:33:8a:58:d4:3b:2e:93:48:
                    44:4f:43:3e:9a:31:3d:de:c9:5f:13:71:d4:34:66:
                    c5:37:c8:18:33:8b:be:30:ef:e4:2e:6a:de:5b:02:
                    58:6b:7f:4e:ee:11:46:8e:fc:be:00:17:30:32:ed:
                    d3:0c:b9:d4:00:f5:6b:ac:18:bc:5b:72:0b:db:d6:
                    f8:69:89:8b:16:b7:24:32:7a:c6:d5:81:72:38:09:
                    89:28:00:a8:43:65:66:38:27:1c:8e:d7:94:9e:f9:
                    b0:88:a1:44:ee:4f:d8:3d:6e:5b:e5:76:cc:b4:ba:
                    82:7d:33:6e:08:40:98:92:7c:c9:f1:c2:13:91:33:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:96:40:33:A6:F1:86:43:C0:38:4C:CF:07:2A:77:4E:5D:39:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4a8:200d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:83:97:f4:a0:12:df:f0:ee:42:dd:93:b5:6e:98:17:e8:a1:
         1b:d4:fb:94:77:22:1c:8d:20:57:3d:9b:f6:2d:bb:d0:ab:67:
         10:08:fd:67:84:5e:10:ad:45:4f:7a:4b:0a:e8:0a:c7:c1:b6:
         a7:91:48:10:92:7e:31:56:09:1a:5a:cc:63:36:1a:a9:e5:65:
         29:5b:9d:5d:ad:4f:24:3d:2c:82:64:3c:4f:27:17:8f:79:ba:
         cb:ac:04:bb:75:c2:08:cf:fc:1a:2b:0e:5c:eb:ee:fa:bb:b6:
         6c:42:3b:c5:88:8b:a3:75:b3:cc:8b:94:40:37:b1:b7:21:51:
         95:a6:0f:93:a9:dd:29:96:4a:df:d2:4e:cb:40:b3:14:d5:d1:
         7a:83:0f:f9:e8:56:6e:74:c5:c1:e1:55:77:b7:43:42:ba:64:
         4b:af:c6:37:c3:43:56:45:68:7d:a9:d3:0b:e1:91:e4:3c:ca:
         7b:89:e9:64:7b:30:42:3d:76:70:f2:1a:0f:45:b8:68:5a:44:
         df:10:18:02:14:f6:1c:6a:0c:fb:84:0d:8b:2f:98:07:cd:56:
         86:99:ee:ce:4d:bc:1d:48:7d:bb:1a:ea:8f:8b:0f:0d:a1:80:
         a0:f2:41:45:ed:d1:27:86:96:d5:42:d3:0a:63:21:ee:d9:8a:
         c6:a5:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:21:33 2025 by rpki-client