Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
File:                     01259f44-7b0a-3214-9e77-66d79c010a77.roa (raw, json)
Hash identifier:          yfmr76kSr4wluIqhU3zIkoWT6UrlCbEbs2j7no6m/e8=
Subject key identifier:   67:CE:50:38:12:BD:EE:83:6B:50:17:46:94:29:06:E5:CF:82:AB:C8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A8B0B4A663742D416D6C78500
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     401287
IP address blocks:        2607:fad8:1201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:4a:66:37:42:d4:16:d6:c7:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=e1d94127-b106-44f4-83ba-6e44ca7a5041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:90:99:b4:ac:16:e0:d3:aa:bf:04:49:e2:
                    5a:63:f6:22:75:2e:85:32:28:2c:0d:fb:56:d5:d5:
                    35:5e:a1:44:20:65:64:e8:54:ef:13:f8:4e:bf:0f:
                    01:02:5a:fb:3d:21:86:d2:6f:3e:1e:48:f7:53:5d:
                    79:58:45:6d:55:34:7f:b8:0a:a5:7d:a7:36:6a:4c:
                    60:7d:7d:77:6c:d1:a0:00:c6:99:01:cd:b9:34:c0:
                    ed:bb:25:ff:5a:32:23:c3:e1:e0:68:84:2f:49:84:
                    36:95:67:4a:ab:1f:9b:d2:5f:92:56:d1:91:a1:12:
                    33:ea:71:da:1e:be:f5:06:56:fd:cb:48:53:d4:92:
                    2b:ff:8b:b5:e8:11:b3:5c:48:72:ac:cc:b1:af:5e:
                    9c:75:88:0d:ab:8b:6f:f6:18:11:1f:c3:03:80:a9:
                    8c:fd:8d:a0:00:de:10:dd:07:72:b0:8c:22:94:e1:
                    73:07:ac:b2:cd:7e:5a:6a:77:54:0b:0c:7f:94:32:
                    ed:da:8a:57:e8:28:17:3f:d5:07:da:97:aa:cc:65:
                    bb:65:81:d5:ee:66:f7:84:f8:c2:41:0c:9a:b9:19:
                    e2:0e:ac:41:ce:af:30:05:49:2f:63:e6:cd:d4:e9:
                    aa:cf:cd:79:8c:a5:d4:1f:1d:55:c9:17:04:ac:7c:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:50:38:12:BD:EE:83:6B:50:17:46:94:29:06:E5:CF:82:AB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:8f:d2:37:a0:93:a5:9b:6b:af:f7:b0:92:5a:a8:7a:ea:
         bd:e5:59:17:5b:28:0d:22:96:a3:95:d5:99:ff:b7:30:33:15:
         79:16:3e:4a:d5:a1:8a:52:06:ca:13:55:d3:37:9c:be:0e:6f:
         f2:f6:32:7a:26:4d:02:f8:44:94:61:3f:e2:6f:ad:7a:ed:31:
         7f:00:7c:4c:2e:61:8d:a6:24:eb:c1:d4:9a:14:89:da:a1:6f:
         59:6a:38:88:17:d0:6b:ba:36:94:49:4d:b5:c1:87:70:94:0e:
         ad:f2:70:a8:38:f6:c4:15:1f:b4:6c:83:a1:92:8e:a8:54:76:
         e8:37:d7:e2:66:21:1c:ac:c3:61:f1:b4:c6:06:d9:33:70:12:
         6a:13:6e:93:4f:cd:26:dd:eb:bf:ef:23:1e:02:3c:35:17:1a:
         2a:6f:e1:32:95:ab:6b:13:a8:47:67:03:4e:e1:db:70:1d:80:
         7b:f4:5c:4c:5c:a3:5a:81:14:78:c7:43:bf:df:41:6a:13:38:
         de:ec:b2:79:d2:fe:25:78:a8:0b:aa:31:de:ca:da:de:ae:82:
         ed:0d:9f:be:c5:0c:57:f8:75:61:b3:a2:37:07:05:34:47:33:
         7d:57:f1:ba:7e:49:5d:60:eb:e9:34:40:f8:53:b3:25:04:f8:
         c8:c6:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 20:16:42 2025 by rpki-client