Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa
File:                     9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa (raw, json)
Hash identifier:          OpVEY9jcd36k20gxTYDex8HeUFxXrCxJIBgn5RhRU24=
Subject key identifier:   37:1C:1D:6A:7A:8D:CF:AD:DC:09:FA:17:D1:06:5B:5D:F3:83:3C:E4
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584A8DD5F6D5C6C72803B099CF80
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     8075
IP address blocks:        2620:119:5077::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f6:d5:c6:c7:28:03:b0:99:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=51da0ebd-d5bd-4a80-ac8d-9dac53bf11cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:b2:85:ca:4d:31:f3:d0:0a:28:c5:34:c4:
                    28:07:1a:5d:18:e8:55:20:5b:06:bb:36:1b:cd:9b:
                    43:f2:4e:ae:54:b1:52:a1:38:32:ae:83:e5:81:24:
                    08:91:8e:75:87:e3:a0:b2:c2:42:48:e9:8b:da:89:
                    fd:42:4f:a7:a6:9a:c5:10:e7:a9:92:1d:d9:08:8d:
                    95:82:47:92:73:64:68:20:d0:60:53:34:d1:87:68:
                    ab:90:45:0e:29:79:04:56:b5:ec:02:c7:d7:27:fa:
                    41:e1:43:b9:cb:5f:3f:67:a6:43:2d:47:40:d7:95:
                    84:5d:04:95:bb:4d:d7:ac:bb:00:56:b2:18:16:f6:
                    79:bf:0b:34:6f:4e:1a:dc:36:0c:0f:2d:14:e9:57:
                    22:02:a7:65:83:36:35:78:65:a6:98:db:a9:35:e5:
                    df:f1:bc:97:a9:79:f1:0b:54:7e:68:93:0c:57:6e:
                    54:4d:04:fe:3b:33:42:f4:6c:5e:e1:58:26:5e:93:
                    24:05:94:b9:b7:22:d0:84:8a:38:02:8f:eb:1e:ea:
                    ad:1b:49:ab:cd:43:c2:41:99:d8:92:2b:e2:c3:f2:
                    16:84:49:5e:70:0d:6a:af:df:83:82:93:d9:1d:59:
                    aa:ad:b5:1c:bc:ac:50:26:08:3a:87:de:94:06:bf:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:1D:6A:7A:8D:CF:AD:DC:09:FA:17:D1:06:5B:5D:F3:83:3C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:5077::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:ec:89:54:d5:5e:8d:af:f3:5a:f4:b1:2d:6f:ca:0d:fb:
         44:90:ab:49:88:d8:14:c2:d7:46:84:26:ff:f9:7c:25:df:91:
         b8:5f:bc:f9:39:29:5d:7f:11:ac:59:48:10:6d:69:33:3a:dd:
         15:d6:d3:0f:97:ae:b5:92:56:cc:78:2a:5d:c4:bd:f0:93:ad:
         3b:56:f2:4f:b3:86:77:b4:85:de:43:e0:6b:bc:b5:92:ab:51:
         49:f6:0e:41:8e:53:4f:d0:59:c8:b4:54:03:31:01:23:71:28:
         b0:1e:5a:33:95:1d:24:49:50:55:7e:5a:0c:c3:ed:c9:3c:5a:
         8b:cc:af:41:8f:25:c6:d8:30:e1:b1:c7:16:4c:3d:22:03:2b:
         dc:e1:52:12:a9:a2:7e:d7:f3:c4:1e:7f:62:01:44:26:bc:39:
         c0:fb:05:1a:81:2e:60:21:8f:ed:f0:d9:6c:b7:95:14:d8:45:
         f4:e1:6e:96:17:c1:54:71:f7:8e:36:8e:ba:d3:8d:9f:38:f6:
         54:1b:90:9a:5d:bc:98:d6:6a:2d:89:46:75:80:aa:aa:cb:53:
         91:09:fa:9c:de:ed:bc:1f:2e:83:36:a6:ff:26:af:51:b1:c5:
         de:6d:ac:b5:d1:5e:45:17:08:4d:37:77:1b:f1:bd:07:2c:b7:
         05:44:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:34:38 2025 by rpki-client