Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa
File:                     072f8713-d6b1-3633-b393-407d3f1fb9e4.roa (raw, json)
Hash identifier:          NG93JvRNHLxBKKxNfI6FWaM3L1NHCqzByNyYNWc9gHk=
Subject key identifier:   75:FE:A1:D6:30:D6:E6:A3:ED:38:D0:81:EA:BB:91:AA:55:65:1F:C9
Certificate issuer:       /CN=badf1586-901d-41a7-b0f3-521998d53931
Certificate serial:       010D0C9F4328584A6C55C0D36E8F841354110400
Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     401661
IP address blocks:        2604:be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c0:d3:6e:8f:84:13:54:11:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=c8dd5f4c-0af9-4d4a-aaa4-4903fb077f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d5:7a:b7:d1:f1:bb:72:2b:93:c0:19:f9:60:
                    e4:dd:c1:6a:9f:99:9e:3c:93:e9:8f:75:64:b4:b0:
                    97:25:04:83:52:87:52:83:75:98:d9:ab:db:e3:be:
                    83:8c:ba:93:a2:89:23:9e:fb:19:b3:2e:a4:61:69:
                    13:52:23:cf:fa:9a:3b:31:86:fc:8b:c0:80:7a:26:
                    b6:f6:69:18:ca:38:20:6f:45:2a:18:97:61:ac:87:
                    92:ca:6a:b2:b4:9b:ae:2a:59:8b:a8:ff:3b:65:41:
                    a1:ee:bf:09:45:12:f1:d3:e6:d0:c2:95:b0:53:ba:
                    58:9c:07:26:de:00:23:90:94:d5:77:29:05:07:e2:
                    34:ca:5f:b4:85:43:2b:37:9f:2f:4f:b5:f4:33:da:
                    6a:17:55:a2:64:3d:3c:6f:8f:5f:f4:97:53:34:5a:
                    d3:3e:cf:73:3b:5a:9e:f7:1c:5e:9e:dd:8f:98:5f:
                    36:00:7a:47:d4:a8:cb:24:5b:61:de:12:58:e5:c8:
                    fe:61:fa:68:f0:f2:17:7c:22:3d:68:23:67:ab:0c:
                    15:aa:e9:5a:43:23:32:bb:97:2f:7e:32:fe:b9:1f:
                    36:ba:a6:66:b3:cf:8e:be:fc:f1:9c:78:9e:da:aa:
                    3e:9f:7a:16:7d:92:2b:c4:a4:c8:76:3f:57:ba:82:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:A1:D6:30:D6:E6:A3:ED:38:D0:81:EA:BB:91:AA:55:65:1F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl

            X509v3 Authority Key Identifier:
                keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:be0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:11:b7:b3:76:c6:91:83:b0:00:52:42:15:a0:82:0f:60:
         3d:61:24:b2:b4:4b:bf:dc:13:72:42:8a:be:ca:47:fc:80:81:
         48:a1:6b:5b:c6:c4:b4:9e:c2:b1:ab:e3:70:b3:2c:22:59:16:
         26:d8:b6:dd:8a:bd:d1:01:36:96:e3:4c:09:19:4b:62:45:69:
         63:24:f1:d5:33:95:35:6f:16:06:65:3f:7b:f8:d7:9a:a5:14:
         7a:bc:33:19:90:ae:e2:17:17:1c:d7:08:48:6c:7b:3f:4e:35:
         50:12:46:2c:f1:09:5a:04:5e:39:fd:53:51:89:36:46:dc:c4:
         9a:df:d7:af:ff:3f:00:f9:c6:ab:74:06:6c:74:ae:fd:8d:30:
         84:ee:9e:70:5a:49:8c:7e:85:00:be:a0:c1:e8:75:f1:75:c6:
         bd:f4:f7:9f:4a:2d:73:6a:a9:22:64:e6:86:91:de:d7:7e:df:
         07:55:17:5a:37:72:16:af:1e:f9:fe:9c:4a:61:d8:e8:eb:7f:
         b4:4d:1a:37:3f:7c:74:11:de:94:b3:ef:7e:61:f3:6d:e8:65:
         0e:1b:f0:24:bb:04:cc:ca:7b:e6:fc:a0:39:5a:64:c1:c6:df:
         40:ab:1a:03:b7:4c:8a:98:8a:3c:cd:91:89:76:a9:c3:e3:4a:
         34:f0:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:31 2025 by rpki-client