Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa
File:                     8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa (raw, json)
Hash identifier:          voDozMnH6QmQgQM8Yxz2UNbhoh9lUOBcGuwE12xQT+o=
Subject key identifier:   38:AE:18:DC:D2:43:4E:65:71:9F:06:56:24:13:70:DD:F2:3E:FA:1E
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F4328584AAB265F6ED2C5B08B6EC94B80
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14500
IP address blocks:        2607:72c0:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5f:6e:d2:c5:b0:8b:6e:c9:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=b7608595-8bca-4dee-a65f-646b9388b96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:b8:af:25:2e:72:88:95:5a:57:28:b5:e1:
                    a3:a7:28:d0:6d:41:de:fd:c2:42:9b:68:0d:55:b8:
                    1a:eb:c6:a0:fa:17:69:15:51:d1:c6:40:db:04:ba:
                    80:de:31:6c:a3:33:f5:8b:fa:52:05:09:9c:a6:e6:
                    ca:2f:41:0d:c6:f7:cf:40:36:1c:5b:11:30:7f:e9:
                    1a:86:84:71:98:f6:9d:72:96:7d:f4:65:02:32:d9:
                    88:a5:84:bd:b0:fb:90:75:d0:46:46:68:62:25:22:
                    9d:bc:1c:3e:a8:7b:a5:9f:ba:f7:1a:a4:4a:f8:74:
                    04:30:21:52:fe:b0:b9:d5:18:b8:f3:b6:1e:a6:13:
                    d5:82:56:9b:bd:2f:31:10:4e:ff:0d:b1:2b:14:41:
                    15:19:d0:24:2f:a6:ac:a2:e2:05:ec:bd:84:22:08:
                    a3:4d:65:0a:9e:e0:f8:7b:63:22:d2:3e:cb:36:be:
                    d2:8c:dc:c1:fb:29:9b:ea:d1:3a:a0:cc:7d:12:1e:
                    49:5d:f7:92:97:5a:d8:19:a2:60:bb:31:17:b6:bc:
                    9c:a6:48:b4:6a:67:aa:9a:82:29:a3:2f:37:82:e6:
                    b4:3f:49:01:eb:45:d1:eb:0d:8d:9b:cf:31:a0:12:
                    7f:3e:0b:07:65:65:d3:0a:22:36:19:c2:57:b6:5f:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AE:18:DC:D2:43:4E:65:71:9F:06:56:24:13:70:DD:F2:3E:FA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:72c0:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:bd:44:d0:e3:44:81:d2:7d:48:bb:18:2a:01:07:3d:c8:
         76:c5:d3:07:ae:ba:ac:a2:00:e4:76:81:0e:3f:70:f2:df:2b:
         40:80:3c:40:71:cb:15:b9:9c:c4:07:aa:04:6a:a3:4b:85:81:
         ff:8a:c7:4e:22:0b:22:bd:aa:aa:c6:5c:79:3e:0f:1f:f8:3d:
         d4:db:28:36:75:6d:28:f4:0a:64:a1:03:9e:d4:6d:3b:d3:5a:
         b6:51:39:41:06:eb:c0:f6:82:6c:48:39:6d:73:ab:d9:74:41:
         ed:1f:9d:43:8e:a8:ca:98:8a:57:1f:07:5a:4d:12:39:e8:65:
         55:86:d9:b7:fa:25:44:7c:82:36:0f:48:0f:50:c1:16:dd:ac:
         15:62:cc:09:84:08:37:1b:5d:ac:39:c9:2f:48:ea:f5:aa:5a:
         b6:e9:7f:02:1b:5d:38:71:c5:69:ce:27:43:7f:5f:14:96:49:
         ff:98:76:80:6a:21:bb:35:b9:35:71:a9:ef:f4:d7:12:0f:1d:
         16:b8:3a:78:1f:18:7b:38:f3:9a:8e:63:e2:ee:fd:ae:1a:48:
         08:24:95:18:9e:8c:6b:71:7e:ba:93:3a:e2:52:8a:04:c0:40:
         13:ac:92:e2:83:2e:9d:1c:68:3b:86:72:6e:28:0e:fb:a4:de:
         29:cf:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:29:30 2025 by rpki-client