Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File:                     7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier:          o95/3oGRa8NCONkGIoxOC4FnB6QHk9/0iAjEBhJcm+U=
Subject key identifier:   BA:E9:25:B3:71:80:CA:99:0A:3F:11:21:43:9A:02:D3:81:E7:AE:5C
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F43285849E7BA6B3146235F83455DFC84
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     46562
IP address blocks:        2604:2880::/32 maxlen: 64
                          2607:f7a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:6b:31:46:23:5f:83:45:5d:fc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=23b681e2-654b-4d72-9d0c-f94394687d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:1a:3a:a8:0d:37:0d:b5:1a:c1:9b:9d:a3:
                    1c:a5:3a:68:1d:c8:f0:37:89:36:47:b4:4b:de:c1:
                    e3:9d:04:16:bd:36:14:a8:96:e5:04:7e:1f:9d:58:
                    3e:87:a3:6a:61:3e:3c:99:db:bf:5f:76:a5:1f:5a:
                    62:a9:e0:43:24:2a:cf:66:be:89:97:93:cf:2c:1e:
                    11:0c:9d:af:33:47:31:58:54:75:e0:a7:29:ef:50:
                    d9:ab:4a:2f:2f:a2:90:a0:6c:7c:28:a2:ad:94:6d:
                    6d:6b:cd:42:ed:9c:01:2c:6c:cb:ff:e5:3b:bf:20:
                    78:1a:0f:5f:bf:46:27:24:cf:67:a4:2f:4b:8b:65:
                    03:34:10:93:c1:a2:f4:6a:09:11:96:0f:ba:a3:c2:
                    ce:5a:27:d1:f7:1f:1c:3e:42:e4:7c:96:96:6a:3b:
                    e0:28:2c:cd:43:d2:fc:43:7d:65:38:6e:2c:63:73:
                    f1:37:0d:ac:ab:52:b0:24:f0:47:97:99:69:5a:7a:
                    57:ee:e6:f6:f0:d8:2b:fb:c2:88:52:7b:3f:ca:f1:
                    11:e5:32:12:96:52:5b:19:46:4b:15:c7:02:77:37:
                    cc:18:c5:42:bf:b5:ac:e7:5d:50:fe:69:05:a1:38:
                    08:17:23:c7:c4:64:d2:0f:df:ab:e8:62:a4:05:39:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E9:25:B3:71:80:CA:99:0A:3F:11:21:43:9A:02:D3:81:E7:AE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2880::/32
                  2607:f7a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:65:0f:3b:79:af:2d:3a:f5:bd:6b:09:9f:98:e4:66:51:
         06:76:80:4c:94:74:79:1b:74:35:2d:e3:af:c4:3f:2a:50:36:
         4c:cf:f5:73:96:88:9a:bd:66:c1:ff:fa:c1:14:fb:65:75:31:
         c4:8a:48:d8:94:67:63:da:16:f5:8e:93:e1:5b:92:3d:17:d5:
         ea:fc:5c:90:55:2e:38:c9:06:ca:fc:73:56:c6:6a:19:6f:1b:
         76:ff:c0:83:a1:5d:6a:87:ed:34:87:04:21:37:c6:74:68:e2:
         a2:f0:98:d9:86:61:c9:fc:f9:b1:fa:e8:1a:29:14:d4:dc:c1:
         96:92:f2:31:1d:44:d6:d7:ce:59:d5:61:1a:e5:51:bf:b3:6b:
         05:4a:90:02:09:f2:1d:83:49:25:ce:b3:15:43:52:99:bc:10:
         af:05:1d:c3:d0:7a:33:ff:f3:05:ad:70:2e:17:ff:96:cc:e2:
         00:75:b5:be:d7:aa:20:b9:2c:47:2e:43:1e:a1:39:40:15:74:
         3d:01:e4:05:a7:fd:83:d1:b5:41:4f:e2:9f:e2:dc:3a:47:3c:
         bd:ee:f1:b7:da:45:6e:9f:69:16:60:0a:7a:55:50:8e:c6:3d:
         c8:3b:99:94:bd:d8:75:bc:53:6b:ac:08:de:1a:a6:bd:d8:b8:
         87:f7:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:25 2025 by rpki-client