Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
File:                     de7bd649-b19a-3283-9c2c-13c94d00554e.roa (raw, json)
Hash identifier:          6DggC4k0Gqk3G7qrpVyYtDyFuYe6ItIu5owwUF6nYAc=
Subject key identifier:   19:E4:80:E0:2B:EB:B8:49:43:63:A3:75:D2:1F:70:6E:50:17:ED:FF
Certificate issuer:       /CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Certificate serial:       010D0C9F4328584A6826010F6C50825CD1A2EB00
Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     800
IP address blocks:        2604:fdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:01:0f:6c:50:82:5c:d1:a2:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=3d9ff357-3e5c-45b2-94a5-772cf47813f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:66:06:80:d9:c9:10:49:a2:af:1e:75:6a:
                    ca:3b:e0:3f:aa:5b:27:63:c6:3f:fb:8f:1e:ba:4b:
                    fb:05:0f:ac:52:d0:5c:a7:ad:24:f7:c5:e1:af:c8:
                    87:3e:c6:b7:95:02:98:45:16:10:0d:2f:0b:3e:de:
                    3e:0d:9a:7b:32:00:a0:9d:b5:df:a3:39:9c:05:65:
                    b3:e7:ee:b6:a1:76:0b:c4:05:39:8b:4a:2e:be:f3:
                    4d:aa:66:18:3f:5a:aa:45:fd:b9:d3:14:4a:65:48:
                    62:47:69:a4:95:91:59:c5:f5:ea:a5:9d:e8:e4:db:
                    2a:50:d6:06:3f:fb:3d:92:ae:1b:70:c8:5e:97:b1:
                    7a:50:bc:77:c7:0a:7d:fb:18:38:cb:6e:b1:5f:3b:
                    5c:9e:a1:1d:7f:f6:85:5a:d9:5c:a8:b8:55:3b:b8:
                    b3:e0:3e:e0:b5:64:89:06:aa:a4:99:d5:2c:c2:49:
                    4b:c2:02:3d:d5:84:3e:94:c9:7f:1d:d5:3c:7d:a5:
                    b2:c7:45:0c:b3:68:b6:7b:c7:c0:d0:dd:a3:20:5d:
                    3d:6f:58:6d:04:7c:32:28:19:be:5c:51:dc:4a:b5:
                    1a:30:35:b4:9a:fa:04:61:6c:ac:dc:25:5a:45:35:
                    69:34:df:b7:bd:a9:5c:44:e8:06:d4:36:87:c2:8d:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E4:80:E0:2B:EB:B8:49:43:63:A3:75:D2:1F:70:6E:50:17:ED:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl

            X509v3 Authority Key Identifier:
                keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:e4:da:ee:3a:0b:8f:97:fa:5f:b0:1e:15:01:c4:90:08:
         78:34:cd:4f:2c:6c:c3:9e:83:1b:31:00:37:77:e7:aa:3d:21:
         74:32:52:61:bd:e2:3f:4a:8d:30:95:8f:c5:88:c0:c0:dc:f3:
         5e:26:2d:da:6e:99:c2:9f:1e:0d:a4:2c:21:63:98:4e:2b:1d:
         1f:97:63:d6:9f:7f:b5:2d:bb:6b:ff:c1:54:41:55:d9:d8:bc:
         97:d4:8b:6c:74:17:31:7b:12:64:e7:7b:bd:11:c8:46:ab:03:
         73:3f:40:a7:54:06:b7:54:cc:2d:93:b2:6c:a7:56:f3:93:f5:
         ab:80:9c:78:b1:b4:99:75:b4:ff:df:a7:9a:5e:1e:b8:3c:fc:
         04:01:da:1c:3d:65:ff:36:43:86:5c:d1:5a:b3:62:23:84:cf:
         91:eb:26:97:17:c1:62:e8:3d:a9:78:a1:e2:2b:0b:81:88:de:
         28:0b:aa:86:0b:ff:75:90:2b:8d:2a:2b:03:97:88:8c:8f:d9:
         b2:82:8e:7c:98:58:67:1b:80:35:9a:ec:f9:69:9a:4e:45:32:
         c0:e7:6c:15:72:35:e2:f4:08:be:47:6e:fd:e4:c4:2b:bc:e5:
         00:27:d7:76:ab:80:5e:76:bb:3d:a4:24:2c:2e:39:35:d7:2c:
         49:d6:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:44 2025 by rpki-client