Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa
File:                     398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa (raw, json)
Hash identifier:          bYtIrvaJAqZDPaE5kN9vH4fbeXZgQpaUpre4c0DS354=
Subject key identifier:   15:84:6B:9F:88:46:9E:B7:A0:3D:90:E9:4F:06:2A:5E:B6:13:04:F5
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584A94D0DE219A3DADE0F974A960
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        2605:ef80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:de:21:9a:3d:ad:e0:f9:74:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=a07583e1-4c8f-4a6b-a887-2bbc1b3036da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:64:08:7b:65:47:da:93:92:4d:4e:b1:1c:
                    2f:7f:2f:09:25:b0:9d:ea:2d:bc:5d:46:24:7b:94:
                    b1:45:f7:2f:c0:3a:71:c7:ba:4c:0f:9f:47:ee:fd:
                    b1:9b:8f:83:dc:ab:1f:bc:66:be:bc:17:3e:f0:f4:
                    ca:3d:6d:1f:e1:22:48:4d:31:12:ac:d4:cc:0c:b4:
                    8f:b3:94:5e:55:54:4d:88:fe:e2:bc:8d:f0:b1:0e:
                    93:c6:7e:7a:51:94:be:fc:f1:56:83:88:55:4e:15:
                    29:01:92:24:eb:01:04:e4:b4:47:22:98:ae:fe:ac:
                    10:18:d5:3d:5d:fc:c2:49:66:a7:83:ef:59:00:9c:
                    b4:c3:b7:a7:32:e8:06:57:86:3e:fc:d3:98:17:a1:
                    a1:eb:cb:6d:8b:cd:2b:8d:71:d7:ff:d4:c8:e5:13:
                    fc:55:a0:0a:2f:f2:21:b3:e0:89:4c:79:43:18:97:
                    10:0c:41:85:01:eb:6c:06:55:aa:47:d8:bf:1a:e3:
                    e6:2c:ae:2e:39:53:63:2a:cf:e7:01:6a:cf:40:ed:
                    92:82:35:94:41:6f:4b:bf:6b:0b:bb:4a:c7:a3:45:
                    cb:15:ea:ff:ce:dc:89:8d:a8:96:6d:f2:e1:3f:10:
                    fa:ef:66:a5:b5:62:fc:c8:82:34:ee:fd:c9:0b:e1:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:6B:9F:88:46:9E:B7:A0:3D:90:E9:4F:06:2A:5E:B6:13:04:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:76:e6:ad:70:1e:8b:1f:46:1d:ee:c7:90:f6:9b:8b:2f:
         2d:51:ca:96:7c:6c:e0:da:80:fb:ce:6e:e5:23:e3:7c:09:86:
         07:13:23:08:4b:d6:8f:05:09:40:e3:39:2a:73:78:a4:ab:8f:
         f0:f2:2e:7d:9f:ef:70:28:f2:72:58:a4:a6:62:a3:cc:ca:60:
         ab:3c:ab:4e:ee:f2:a1:b2:3f:d2:87:7c:da:3a:06:1e:27:64:
         cb:75:27:58:5e:a5:60:22:b9:55:86:9a:cc:5b:ee:44:d5:07:
         31:30:f3:85:64:ca:7b:4d:2a:ee:ed:9f:53:07:a2:bb:03:e2:
         88:56:99:29:c5:2a:df:8d:31:5c:bf:5e:c6:ca:7c:c1:21:36:
         c4:b5:f9:92:50:34:c6:92:d6:88:a4:af:fb:21:c4:5a:49:27:
         8f:4a:43:b7:c1:6f:c4:dd:ff:46:fb:4c:55:c8:c0:d0:a0:18:
         7a:32:0f:d1:f2:d2:ca:e4:8a:e3:44:ba:06:ce:76:fd:82:6b:
         43:7c:6e:0f:6a:74:9c:ec:8f:fe:29:ee:c9:4f:1b:1c:63:63:
         1c:5f:4d:6f:04:41:a4:5b:36:ca:79:8a:11:e0:04:94:61:94:
         3d:59:31:b8:55:68:bf:c7:5f:3b:5b:22:81:30:5e:7a:5c:27:
         62:1b:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:11 2025 by rpki-client