Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/25177984-137f-3297-acd7-9b1c4827ffd4.roa
File:                     25177984-137f-3297-acd7-9b1c4827ffd4.roa (raw, json)
Hash identifier:          iJznFivkJm0erAYR/UaGtOBNzfaxbiOQuml6MX2kF94=
Subject key identifier:   70:82:5F:17:3F:68:3D:28:56:A0:AB:ED:8A:06:27:79:EE:18:47:77
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584A6DBB3A60AFB412B655B44940
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/25177984-137f-3297-acd7-9b1c4827ffd4.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     54681
IP address blocks:        2602:fba2:3::/48 maxlen: 64
                          2602:fba2:4::/46 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3a:60:af:b4:12:b6:55:b4:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=f8cf1b70-5579-4fe6-b65c-26d5679ca633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:22:fc:cc:8f:14:3f:45:e5:e6:d0:68:23:
                    ca:60:43:a4:0e:fd:50:3a:03:d9:14:9d:e5:a3:0a:
                    58:eb:e7:5b:e4:03:00:0e:23:b1:5b:1d:b4:ae:12:
                    1b:bd:ad:25:48:7e:77:51:81:ad:df:9e:0f:75:94:
                    b7:1e:46:62:60:8f:b6:61:bb:2a:03:e3:9a:f6:64:
                    78:e8:31:fa:23:3c:4d:d7:5d:58:d1:eb:05:d5:f7:
                    bf:98:8b:76:28:e0:cc:5b:ff:be:5a:ba:c2:c7:24:
                    82:4d:67:a3:49:db:bd:78:0a:60:83:d7:cd:62:98:
                    a2:7f:a9:59:9c:a0:4f:2c:e5:e5:f1:81:a9:c3:6f:
                    ad:82:70:7d:7e:94:80:54:4e:d8:d9:35:55:5e:c2:
                    d7:7d:d8:18:4a:01:19:b4:50:4d:60:5a:e6:cd:28:
                    f4:e3:61:20:e1:29:8e:f4:13:9c:27:54:42:e6:eb:
                    e2:d2:f8:35:8a:e2:d2:e6:e8:f8:45:bc:c5:e1:e4:
                    18:f9:0e:2f:81:0c:c2:e7:d3:95:f0:b6:a2:0b:4a:
                    65:b1:9e:cc:7b:30:04:95:b6:d2:ca:4c:08:0c:8d:
                    07:d9:f8:af:5e:0a:a2:5e:69:07:d3:92:58:48:9c:
                    a8:f0:08:48:42:e5:33:6d:75:c4:a4:0b:17:41:76:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:5F:17:3F:68:3D:28:56:A0:AB:ED:8A:06:27:79:EE:18:47:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/25177984-137f-3297-acd7-9b1c4827ffd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2:3::-2602:fba2:7:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2a:31:fc:f8:2a:9b:07:3b:ae:d0:ba:68:be:be:b4:b8:be:
         8f:5c:bb:3a:82:29:58:79:3f:09:71:4d:bc:b0:ff:8f:d5:3a:
         66:71:15:f8:09:87:9e:c0:7a:c6:21:c3:7f:30:73:e6:13:63:
         89:f3:38:81:12:96:b9:5c:ef:bf:4b:21:68:a0:32:92:f6:51:
         d0:6f:3b:70:e7:5e:c2:c4:70:9b:2a:7f:25:a4:04:a4:72:ba:
         5e:5e:e4:54:5e:d8:44:f5:62:e6:6c:99:d1:55:66:66:ff:e2:
         3d:50:e6:20:33:53:ea:75:67:1e:56:54:62:4d:3b:66:85:26:
         f3:48:ee:be:b2:67:a3:2b:91:32:73:09:8b:62:d6:34:66:d5:
         42:b5:23:fc:92:84:88:16:5b:6c:0a:a1:3d:98:23:93:c9:33:
         6c:e5:91:3c:f4:58:e2:d8:c0:16:f8:34:a4:29:46:dd:98:5e:
         83:ce:ed:34:5c:62:ec:a8:26:d7:f7:5b:d9:66:c2:e1:d2:5d:
         cf:42:65:c3:7b:3b:16:d6:0e:29:3b:f4:24:01:71:20:e4:f4:
         5e:d5:ac:3c:74:6f:a1:d6:68:51:60:ea:2b:85:18:8f:41:58:
         34:8c:7e:a3:70:40:75:c2:bb:8e:de:ad:46:65:7e:b4:0d:8e:
         2f:ef:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:06:16 2025 by rpki-client