Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
File:                     e37b5869-b2c1-3651-acaf-85d0925faaea.roa (raw, json)
Hash identifier:          xoQ7WJdGC614/vJ54HbegrHAlM2cfSpY+kJYB7LfjXM=
Subject key identifier:   75:86:24:F2:C0:60:42:8F:91:1D:4C:C6:D4:0B:61:4B:BB:26:71:5D
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584A7085EBFC0CCB6C6A0223B880
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     47720
IP address blocks:        2607:6b80:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:eb:fc:0c:cb:6c:6a:02:23:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=5dc4eb17-074a-4267-9f82-61ff59a1f722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:86:6b:f7:3f:0a:bc:7a:2b:f1:ae:34:0b:
                    43:21:a6:ec:de:38:24:d1:30:36:95:70:38:cb:82:
                    24:46:bf:40:ea:e7:d8:93:d5:51:17:7c:0c:72:57:
                    1c:98:f8:2f:74:da:23:1e:1e:13:e7:eb:51:20:e2:
                    85:ea:94:1e:16:a7:6e:c0:7a:2c:61:a3:1a:d9:db:
                    2f:f9:68:ab:ba:90:ff:9a:91:35:82:d9:7b:d1:10:
                    dd:58:26:ef:73:24:34:30:68:ee:36:97:56:57:92:
                    d4:76:78:8c:47:0b:fd:57:55:b0:74:a5:8d:a3:73:
                    b8:36:15:ad:db:db:eb:30:3d:a1:11:5e:f4:c0:d6:
                    f8:b3:50:9f:88:47:0a:8e:7d:d0:d5:3c:c7:ff:8b:
                    02:fe:d0:33:5b:f9:1e:27:33:58:cd:ef:ba:c1:b3:
                    78:58:20:4c:da:56:d5:a3:93:87:e6:6c:7b:b0:98:
                    00:84:0c:c6:38:19:76:47:61:ce:74:12:61:bc:cf:
                    e4:51:c0:4f:80:98:b6:43:f1:88:12:19:ed:59:df:
                    4a:03:a1:fb:ed:d4:92:41:1c:a7:98:b0:db:89:f7:
                    b2:0a:cd:66:82:71:d2:0a:07:86:51:91:c3:bd:5a:
                    ab:ef:a4:12:82:e3:23:62:fb:72:29:ef:88:b6:30:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:24:F2:C0:60:42:8F:91:1D:4C:C6:D4:0B:61:4B:BB:26:71:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:de:66:f3:f7:73:25:88:55:ca:2c:0f:3b:6b:ff:27:9b:a4:
         58:bd:41:7d:40:0a:b2:1f:21:fb:d7:34:15:3d:e3:2a:77:68:
         6a:d2:8b:61:ea:72:c6:df:5e:97:d0:a2:24:0b:f6:d6:f3:dd:
         12:74:dd:4d:00:fc:67:e6:47:47:71:20:d7:5d:30:81:2a:fd:
         6b:92:9c:8f:d6:a2:4b:39:68:3a:36:91:10:63:9d:c2:53:a9:
         45:3e:73:74:29:4a:9b:16:42:5e:02:19:53:25:82:c2:f1:11:
         2d:27:a0:c5:17:95:17:3a:63:7e:fc:01:76:ee:c6:ed:20:35:
         7e:40:e3:52:25:f2:f2:ac:75:59:94:c4:ad:79:e4:bb:ef:a5:
         3e:72:af:48:ee:d5:eb:41:c6:3f:63:07:d1:b1:aa:71:94:b3:
         dc:9a:e8:3d:d2:c1:5e:3b:74:1e:37:6c:0a:ba:f7:d1:af:5a:
         bf:c2:0a:5c:2b:6e:9a:8b:45:d4:fc:c4:5d:c5:7e:aa:d4:5c:
         7e:f8:21:d7:b3:29:01:55:d3:5c:51:e1:17:fd:00:ef:b5:50:
         bb:e2:b4:c0:25:7d:b7:2a:f0:90:5a:5c:0a:43:4d:57:25:54:
         36:24:23:4b:05:84:1e:fa:ca:15:4e:eb:33:6d:be:0c:70:08:
         80:1c:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:35:24 2025 by rpki-client