Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa
File:                     265a8988-b948-36f7-b6a6-af2bf112ce1a.roa (raw, json)
Hash identifier:          3uoa/ektI0kZyMZiryqndbi3hmuZ8SO3khr1BuD+5fM=
Subject key identifier:   71:F3:E3:8A:B5:5E:AD:94:4D:5B:E7:D9:D8:B8:F9:DC:F6:F3:FC:D2
Certificate issuer:       /CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601
Certificate serial:       010D0C9F4328584A75A8DC43DD0FC4621AE5AA80
Authority key identifier: C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa
Signing time:             Wed 09 Jul 2025 09:10:34 +0000
ROA not before:           Wed 09 Jul 2025 09:10:34 +0000
ROA not after:            Tue 07 Oct 2025 09:10:34 +0000
asID:                     197696
IP address blocks:        2607:e080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:75:a8:dc:43:dd:0f:c4:62:1a:e5:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601
        Validity
            Not Before: Jul  9 09:10:34 2025 GMT
            Not After : Oct  7 09:10:34 2025 GMT
        Subject: CN=c98d016e-2bcf-4702-83c1-32ea8aa3a96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:a3:d2:66:80:06:22:48:2c:0c:2d:69:1a:
                    a4:08:59:45:d7:9a:78:e7:fb:05:79:63:ff:2d:a0:
                    9f:d0:d6:6a:9d:5b:d8:32:62:8d:1e:ee:fc:84:1d:
                    85:1d:b2:6e:20:e4:fa:f1:57:0c:59:7c:28:34:b6:
                    ff:ce:c3:a6:fa:ef:7a:bd:8e:bc:9b:5e:5d:8d:88:
                    e3:e7:4f:53:91:05:77:1c:28:33:4c:6e:2b:63:08:
                    12:60:8f:8c:19:01:8b:8e:d6:03:0f:10:e5:90:75:
                    e8:56:18:81:9a:e5:2d:66:f2:10:41:3d:47:11:7b:
                    ff:47:f3:51:6a:25:2f:5f:73:79:6d:c6:04:4b:34:
                    71:28:50:71:cc:cf:a2:7d:52:c4:1d:1c:c7:2b:99:
                    32:3c:ba:ba:bf:c0:eb:75:0a:75:9c:82:61:2d:0c:
                    7b:13:4c:58:29:6b:5a:d4:da:01:ed:9e:ef:05:52:
                    83:18:cd:24:b9:43:43:d4:43:0e:ed:5f:2c:7c:65:
                    ce:48:62:3f:24:04:92:5d:5f:a3:79:7f:5d:b5:1f:
                    43:05:9a:3d:75:63:a9:45:56:fd:3f:3b:28:af:34:
                    ff:f6:ef:7b:89:52:6e:a0:8a:58:a3:d8:78:95:5c:
                    8f:9c:44:85:f3:59:05:08:7a:51:d7:74:cc:bd:ae:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F3:E3:8A:B5:5E:AD:94:4D:5B:E7:D9:D8:B8:F9:DC:F6:F3:FC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:6a:74:f5:8f:1a:cc:03:eb:be:c2:6b:ca:08:af:66:0c:
         52:27:77:0b:46:fa:7f:c1:7f:41:3e:3a:ce:64:74:f1:4b:4c:
         45:21:91:3a:33:fb:d0:15:7f:6d:c9:9d:fe:63:44:f9:c9:65:
         6e:22:60:a3:86:5f:ae:31:66:50:5a:ae:03:08:60:e5:91:b1:
         6b:35:a8:01:a4:8d:ad:87:2b:0b:6c:e8:cc:9b:33:6a:f6:23:
         55:ae:64:f8:2d:93:4e:b5:63:25:8c:0d:f9:52:2e:c0:d0:58:
         6f:37:ec:2d:6c:5e:36:84:b4:2d:a0:b1:f6:4e:6d:84:52:50:
         fe:2b:b3:ee:74:16:73:b6:af:ae:88:cd:fa:0a:b3:68:5b:c8:
         59:8d:33:09:a0:70:0c:fd:c9:20:e3:c9:bc:36:96:45:e4:4a:
         78:26:a1:32:b0:31:cc:da:22:a5:51:36:87:05:db:ca:c4:22:
         8d:b8:11:49:4c:c7:27:65:f6:8b:29:c9:74:38:fd:9f:7c:69:
         9f:48:66:c6:18:ee:50:a4:56:34:ab:d6:6c:ed:98:17:5c:57:
         6d:fa:21:dc:33:59:5a:ce:c2:0e:bc:f1:0a:ad:78:bc:7e:5b:
         49:a1:27:ee:79:3b:dd:97:1e:09:9b:6b:21:f3:4b:06:df:c5:
         86:4d:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:46 2025 by rpki-client