Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
File:                     bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa (raw, json)
Hash identifier:          5k3SGseExU5rM3/VKqHPXfcCn+cHLiEM+DpblRCgE0s=
Subject key identifier:   8B:1B:FC:6A:3E:32:8E:BE:82:A9:81:C5:25:05:41:72:D8:D2:B5:D0
Certificate issuer:       /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial:       010D0C9F4328584B5F3724EEE659E3B3BD6113C0
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     11711
IP address blocks:        2607:f068::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:24:ee:e6:59:e3:b3:bd:61:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=cf7f0880-3ef8-413c-ac8f-c9b870e0843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:12:ae:02:9c:1c:71:bd:f5:36:c0:c5:14:
                    41:a6:b8:3c:ec:49:da:30:4f:c4:41:04:c6:11:42:
                    cd:3a:14:11:0f:8e:87:46:1f:32:fb:74:ae:0e:16:
                    90:5a:8d:3e:88:07:76:92:c5:27:7a:fc:48:87:1f:
                    e2:95:c4:06:77:23:9f:a3:e7:eb:9a:25:3a:fb:02:
                    dc:4e:d4:a0:0d:f1:04:67:00:d9:7c:2f:4c:58:a9:
                    55:85:02:f9:0d:ad:ec:c5:6b:eb:05:3c:9b:f0:40:
                    f4:06:7a:5e:da:62:45:75:c2:49:3e:34:a6:bd:4d:
                    2a:b3:d7:53:01:c5:43:7e:5a:5a:b3:cc:f0:f4:75:
                    9d:05:d9:0c:4f:a3:1f:a8:3d:d1:af:75:89:88:d3:
                    63:5d:32:39:b0:5d:18:fb:83:9a:08:aa:37:f4:b7:
                    33:05:17:d9:40:22:3d:13:0c:a4:31:b7:f5:a9:5f:
                    db:4a:a1:83:da:ac:26:6d:dd:47:98:a4:68:1f:c8:
                    aa:d4:30:04:06:2d:e8:d9:4d:69:a2:02:cb:34:a5:
                    ca:7d:d5:27:eb:12:75:05:0f:0c:32:ba:d9:db:c6:
                    4f:c7:ab:33:59:1f:e9:b9:9b:6a:c5:b1:74:55:65:
                    0f:ab:4a:2c:1f:c7:7e:36:7e:03:03:67:36:9c:ae:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:FC:6A:3E:32:8E:BE:82:A9:81:C5:25:05:41:72:D8:D2:B5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f068::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:94:7e:45:72:b4:8c:42:a1:a7:51:8f:0f:9a:42:07:ad:d5:
         b0:88:5c:56:da:3e:6a:fa:18:18:91:b0:45:f7:ed:d2:02:77:
         34:72:76:f6:71:43:85:1d:5c:7f:e6:06:63:72:b1:d1:31:9c:
         65:cd:50:00:b6:93:d6:37:f6:1c:0a:68:49:4a:f9:2f:36:29:
         50:c5:6f:71:7b:9e:51:4f:3d:5d:3a:48:66:7b:5a:59:6b:a7:
         6b:83:9e:4d:4a:ce:57:3d:96:cc:eb:c3:a2:15:7f:03:37:a7:
         b2:38:6d:00:99:e2:aa:fa:51:68:ee:20:69:a7:ee:46:c0:33:
         ba:fb:c9:1e:67:d7:e7:02:d4:59:79:46:1e:8e:df:70:6b:e8:
         ce:e2:f9:70:16:97:23:07:93:d3:62:19:4f:a1:25:a3:77:5a:
         7c:9e:42:68:a0:e4:83:a9:09:84:39:f5:cf:aa:e5:a5:ea:de:
         bd:18:a2:91:04:ad:d2:14:92:05:e2:f9:9e:a2:35:cf:c3:ab:
         89:77:2c:49:be:bc:1b:71:17:57:72:83:13:fb:78:c6:14:de:
         e9:c4:71:0a:c9:5f:c5:e6:45:4a:fe:01:5d:2b:1b:36:46:c5:
         19:72:07:27:14:0a:9e:8e:a7:b9:da:c4:78:8a:d5:c2:92:22:
         a3:ef:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:11:11 2025 by rpki-client