Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa
File:                     321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa (raw, json)
Hash identifier:          nk9BsV79wO3tc1xCyeCcBMpFyuNkMioXwDOfyRF+fjI=
Subject key identifier:   93:3C:AC:9E:7E:DB:A3:B9:A8:46:FD:71:F1:1D:BA:9F:6A:B2:B1:9C
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584ABD4B8C27E36C76B08FE04F00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     25623
IP address blocks:        2001:4830:3100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8c:27:e3:6c:76:b0:8f:e0:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=8671eec2-d862-45f0-97f2-634ae34315be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:b5:7e:f9:ea:61:83:3c:a8:68:a0:60:e6:
                    79:a3:0a:71:be:92:b0:0e:83:86:8e:05:0f:8c:93:
                    cd:ff:90:28:4d:b6:a2:f7:3d:e1:6f:75:20:58:a6:
                    ce:84:8f:93:e2:d4:fc:e1:c3:7d:a7:fe:9c:a7:2f:
                    e9:35:ae:27:41:99:f1:e2:6f:b7:de:f1:4a:58:19:
                    cf:26:4a:2a:f8:50:bb:e9:60:c3:c6:a9:e3:e1:f3:
                    85:05:4d:45:04:b7:42:85:85:d4:67:7c:79:d5:18:
                    7c:18:16:d0:e8:68:e8:f1:2c:5b:a5:2f:57:76:44:
                    9f:ee:17:22:d9:dc:f5:fb:2d:e0:ad:2d:95:c9:7b:
                    3a:6d:8b:80:c6:47:bc:f7:a6:a3:6a:7f:7c:fe:f6:
                    d1:5d:2f:8d:a9:71:d2:7e:be:13:b8:7f:45:b2:0d:
                    e8:c5:5e:e6:45:9f:ba:33:99:55:93:00:f9:58:58:
                    1f:d6:6d:5b:cc:d6:c9:5b:64:32:e0:a7:a1:e1:48:
                    b1:58:1e:77:0e:6e:14:56:d9:1d:32:87:c3:71:e8:
                    7e:0e:68:b2:3a:e2:02:cb:86:2c:12:f8:1f:20:6a:
                    fb:bc:ce:79:20:09:3c:e0:30:aa:07:38:ad:c7:fa:
                    87:b6:28:5c:26:0a:78:9c:0f:63:b7:2e:a4:66:03:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:AC:9E:7E:DB:A3:B9:A8:46:FD:71:F1:1D:BA:9F:6A:B2:B1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:3100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:81:76:3d:83:be:2e:12:72:ca:49:6a:eb:70:c7:7a:25:
         3c:ee:58:58:86:13:74:03:1e:b3:92:50:31:8e:a4:13:e3:37:
         94:c8:c4:62:8b:b1:e8:d1:05:4b:c9:e4:4e:48:5e:38:98:47:
         08:64:dd:e4:a8:6d:ca:c0:88:45:a6:cb:71:43:0f:bf:30:2e:
         6a:2c:60:bf:e7:55:2a:f0:04:37:61:af:f8:29:a3:a2:30:13:
         e7:9f:72:82:0a:bb:1a:da:61:30:64:9a:15:0a:6e:26:b4:f7:
         0a:1f:4f:97:7f:bc:09:44:02:00:8c:5b:fa:21:76:81:59:7c:
         57:01:5d:93:88:f9:f5:1c:cc:ea:ad:91:6c:0f:a1:d0:44:71:
         4b:d2:27:2a:fe:1a:7a:24:54:d1:90:15:e6:41:89:c2:df:2a:
         1c:0c:33:00:a3:82:af:a5:cc:35:1c:75:c1:bb:e1:2d:a6:4a:
         73:80:68:1e:13:56:c3:a4:88:74:34:63:6b:a1:46:ca:a4:9f:
         30:f2:6e:26:c4:cc:21:dd:5c:12:cd:a7:96:cf:64:a4:83:54:
         a0:06:b7:2a:67:54:40:6d:30:5e:d0:6d:7d:4e:ed:7d:d5:d2:
         19:55:f8:80:90:5d:dc:63:60:da:85:7e:86:bf:f3:48:62:6f:
         d2:cb:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:31 2025 by rpki-client