Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
File:                     c0efd304-3758-3d51-a7f6-fb959de91d64.roa (raw, json)
Hash identifier:          fsF5R6diov1q6CzySElFeJrgY7vtX4J10fw5vG46i0A=
Subject key identifier:   3F:D0:02:B3:6A:10:2E:54:47:EC:92:CE:8D:AA:3C:E8:05:BE:59:3D
Certificate issuer:       /CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
Certificate serial:       010D0C9F4328584A9AB99567FCED87B095294F80
Authority key identifier: 5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
Signing time:             Fri 18 Jul 2025 14:59:45 +0000
ROA not before:           Fri 18 Jul 2025 14:59:45 +0000
ROA not after:            Thu 16 Oct 2025 14:59:45 +0000
asID:                     401835
IP address blocks:        2607:7640::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:b9:95:67:fc:ed:87:b0:95:29:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
        Validity
            Not Before: Jul 18 14:59:45 2025 GMT
            Not After : Oct 16 14:59:45 2025 GMT
        Subject: CN=dbf08139-8f28-47f6-a474-d5182fff95d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:9f:89:fe:19:8f:fc:d3:0d:3c:be:23:ad:
                    83:dc:35:29:03:15:13:fa:21:7f:5c:be:a6:54:b1:
                    a2:8a:a0:aa:d6:f5:d9:5a:61:26:8b:4c:82:f3:0b:
                    a9:44:df:97:67:dd:66:08:bd:53:ad:17:6f:0a:48:
                    e2:da:96:3b:9a:ea:e1:49:50:0c:9d:e5:57:42:14:
                    8c:f3:65:a7:05:8b:ab:7c:0e:99:f5:c9:ee:ce:3e:
                    6e:d2:83:b8:0e:ed:01:2a:a7:59:53:91:a8:a3:22:
                    f9:13:39:8c:43:b7:d6:74:ae:31:27:c9:dc:0f:b9:
                    b7:2c:0a:10:f4:cb:eb:20:a6:1d:c2:ba:d5:ca:a0:
                    42:21:9e:13:9c:a0:3c:d4:d2:ba:cb:14:ab:94:89:
                    3c:58:f5:c8:8b:0d:1b:f0:4e:d8:2b:35:ae:da:13:
                    e0:b9:5e:7d:c2:f4:01:72:53:29:0d:9b:ba:7b:6e:
                    80:b9:92:cb:ff:ac:de:6a:e4:4c:9d:b5:4a:e6:66:
                    38:fe:11:84:d3:b3:d7:27:7c:e3:ad:08:4d:af:bf:
                    81:07:7e:97:66:1f:e8:6c:9b:fd:c4:44:d2:c0:52:
                    ce:d6:12:cc:6a:c4:fa:2f:af:9a:16:76:ac:56:fe:
                    7b:8f:84:92:85:4c:34:0c:1d:a6:d0:56:de:0d:37:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D0:02:B3:6A:10:2E:54:47:EC:92:CE:8D:AA:3C:E8:05:BE:59:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7640::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:96:8c:3d:9d:af:88:40:f3:45:f9:98:dd:19:7b:9c:c6:49:
         00:0b:00:f4:1f:31:6a:56:68:d3:6d:af:83:24:63:7b:ec:2f:
         e8:bf:e5:b8:9b:eb:e4:1d:ea:73:cd:17:9d:15:5b:7d:1b:b3:
         25:9a:7f:2c:12:00:14:dc:87:53:e1:71:ec:59:ae:ee:58:e9:
         ce:43:ad:b2:7b:19:cf:14:05:1a:b4:ed:f8:11:a5:60:a7:5e:
         49:be:d6:43:83:c9:cb:11:57:84:0f:c2:cf:80:52:65:60:fe:
         15:0a:90:c2:64:79:f9:0f:97:d4:ea:50:f1:47:e4:35:c2:e7:
         12:b5:4a:4e:5a:11:d4:c2:4f:6d:65:af:79:43:4a:f2:ae:c3:
         d9:26:00:67:6c:a3:b1:0a:90:8b:76:41:bf:5d:63:e3:b9:ab:
         3b:69:df:4d:03:99:86:65:3e:76:ca:ba:89:4e:c2:0c:7c:42:
         22:19:dd:2e:d6:92:39:ae:97:75:1d:80:74:88:76:6d:8e:ce:
         d2:4a:86:f1:84:d8:7e:29:ea:33:58:4a:f8:70:c9:04:27:4d:
         98:65:3a:99:84:67:51:b8:1d:74:d5:82:1d:f9:92:d7:18:7d:
         b2:d3:24:3a:7d:8d:67:71:15:81:60:77:4b:42:0d:4f:0f:f2:
         ad:5f:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:54:21 2025 by rpki-client