Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
File:                     b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json)
Hash identifier:          yl/i04Ca5Ia0B/eAm3ulx7apkUU3SEFxT89qpErbsdM=
Subject key identifier:   D6:35:ED:4C:33:A3:1B:D5:A2:DF:E0:32:55:91:24:83:6F:BA:F4:59
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584A9D30EBE938D551A616C2F440
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     13807
IP address blocks:        2607:fdf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:eb:e9:38:d5:51:a6:16:c2:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=5aea4fd6-ee08-4d32-91f2-18cadc202044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:7c:b4:8e:05:7a:9c:b7:b3:c8:6b:46:de:
                    31:43:58:ec:62:a1:15:b2:53:01:26:16:1f:e1:de:
                    d9:0f:0d:0e:9a:d6:ca:ca:a1:87:ec:79:f4:82:25:
                    82:d7:dc:75:f8:60:cb:af:2a:17:3f:c1:d7:f7:1c:
                    36:2f:d2:85:70:ea:34:33:73:8f:16:ee:05:c1:89:
                    b4:86:97:7f:ef:52:f9:36:34:97:21:50:3e:d6:eb:
                    81:58:f5:b4:9a:a9:be:29:18:b0:52:ea:25:fd:31:
                    c0:87:b4:18:dd:e8:57:6c:ec:66:c8:b2:73:22:79:
                    c5:2f:2f:df:c6:b8:df:23:5b:d6:62:1b:86:4d:6c:
                    72:26:9a:1a:2f:21:fe:7d:eb:db:df:a0:8e:4a:f2:
                    c0:ec:00:6e:88:74:27:c5:99:31:75:cd:74:9d:73:
                    6a:bd:a6:ff:2d:3d:eb:ea:ae:32:fa:44:19:e7:c6:
                    e7:cb:e2:81:53:16:0c:73:c4:c8:53:41:09:10:76:
                    20:91:2a:68:ea:76:07:ed:67:5a:56:f4:89:9f:7c:
                    ad:9e:91:4f:a6:f6:63:4c:60:1f:97:e1:20:a3:35:
                    68:fc:28:3f:f5:66:5a:39:89:2b:61:5f:9d:0d:09:
                    89:ce:73:42:d5:ac:53:c1:d3:de:f7:cd:59:2d:56:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:35:ED:4C:33:A3:1B:D5:A2:DF:E0:32:55:91:24:83:6F:BA:F4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:1e:ff:3b:8d:89:d7:12:3c:94:34:27:c6:67:fa:91:45:
         af:99:49:aa:7f:ef:be:b9:32:1b:40:92:83:51:42:ea:23:02:
         cf:af:14:fc:87:26:70:5d:ab:8c:a1:ba:61:f7:e5:27:5a:d2:
         df:37:82:04:69:0f:de:8f:56:79:40:80:c9:60:66:a8:b5:16:
         4c:eb:69:76:78:43:a4:bf:4a:25:98:87:8e:67:b0:a7:ff:7b:
         1c:57:b0:ef:aa:b9:dd:be:8e:0b:6d:05:c6:0f:a9:5a:fb:2f:
         56:d1:80:57:c3:3e:59:45:7a:c9:17:9b:a8:88:5c:d2:f8:bb:
         47:79:f0:28:2e:c3:29:22:77:cf:b8:17:c1:3e:25:be:12:65:
         6e:f9:da:08:d4:07:0a:2f:49:3d:b2:a0:14:b8:71:e4:71:6d:
         d2:ec:2d:05:ee:c8:bc:01:8a:77:b4:01:e6:f1:d5:73:40:11:
         0c:46:48:08:7d:d9:03:25:ea:05:ac:43:2f:1c:99:d9:f6:b0:
         75:bf:ad:90:49:f6:ea:fc:4f:85:00:7b:d4:d8:7b:32:f2:93:
         af:b0:f7:d5:09:49:4d:2b:97:56:05:87:43:03:ac:d9:a7:c8:
         fe:c7:9a:62:4d:5e:61:ec:7d:ef:f5:eb:eb:2f:0e:f7:08:0d:
         62:2d:5c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:46 2025 by rpki-client