Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/64ed1768-9955-3e99-9b8c-ff99dc8285a2.roa
File:                     64ed1768-9955-3e99-9b8c-ff99dc8285a2.roa (raw, json)
Hash identifier:          4n/EEA6R/m+yufGxerwqrWoWjxYMIJSKfLtMr3Z+nTs=
Subject key identifier:   E9:3B:F1:8A:03:1D:BB:93:59:60:3D:98:CC:76:C6:DE:51:73:92:E2
Certificate issuer:       /CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
Certificate serial:       010D0C9F4328584A3A6BC2B24452E79734622F80
Authority key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/64ed1768-9955-3e99-9b8c-ff99dc8285a2.roa
Signing time:             Wed 18 Jun 2025 03:54:46 +0000
ROA not before:           Wed 18 Jun 2025 03:54:46 +0000
ROA not after:            Tue 16 Sep 2025 03:54:46 +0000
asID:                     401134
IP address blocks:        2602:f8c7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:6b:c2:b2:44:52:e7:97:34:62:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
        Validity
            Not Before: Jun 18 03:54:46 2025 GMT
            Not After : Sep 16 03:54:46 2025 GMT
        Subject: CN=d1760c1b-9fd0-4bb5-a996-5130e257195a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:a2:df:6b:ba:cd:8f:54:44:26:eb:60:1c:
                    a7:db:a9:82:86:c3:67:3f:21:2c:4f:3c:72:be:2c:
                    d9:54:b1:e9:d1:63:0e:db:9f:7b:09:7c:1a:2f:64:
                    9c:6f:06:66:08:90:71:2e:ed:c0:ce:26:06:24:80:
                    cb:ce:04:68:ce:b4:54:07:2c:6a:b2:dd:0c:40:81:
                    8f:72:70:c9:b4:37:c4:36:1a:69:fb:a6:2e:24:d3:
                    23:f0:50:e3:31:5b:d4:1b:f4:23:23:3b:d8:4b:88:
                    de:99:ff:1a:4a:2c:a0:b4:f7:9f:65:13:30:56:3a:
                    d0:7a:ca:87:0d:9d:23:35:ea:0c:4e:d0:fd:34:60:
                    6d:55:74:f8:7d:df:85:4e:43:38:51:8f:19:da:ca:
                    52:9d:06:4d:48:80:bd:58:a1:d8:f2:16:ce:73:80:
                    f8:25:da:57:ee:93:4e:d6:d4:c8:d8:85:03:cf:b4:
                    fa:6e:43:ba:47:38:0d:f2:41:f4:e1:73:1d:e6:70:
                    bd:b7:5d:b9:03:d9:25:e1:e3:bd:3d:5d:3d:11:a9:
                    9c:72:b2:7f:cb:18:ef:ca:b5:6e:34:98:51:4d:f6:
                    7f:2f:e5:d5:23:e7:4d:81:97:ae:5f:96:36:94:f5:
                    73:94:f4:e6:c9:ca:39:8e:09:92:b1:32:d5:7a:00:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:F1:8A:03:1D:BB:93:59:60:3D:98:CC:76:C6:DE:51:73:92:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/64ed1768-9955-3e99-9b8c-ff99dc8285a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl

            X509v3 Authority Key Identifier:
                keyid:BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a9:1d:58:e0:22:8e:c6:50:18:7c:64:0b:b1:d9:40:c2:7f:
         8e:b1:0b:59:11:1a:a0:a7:6e:9a:65:9e:64:6b:60:10:13:9a:
         d4:d8:b7:5e:e3:12:b1:61:c0:fc:4e:ef:89:4d:8b:09:1e:5c:
         cd:4a:28:ee:54:8f:99:6d:33:98:7b:97:20:85:29:e5:bd:f4:
         8c:ab:9a:8c:8c:cf:5a:27:61:97:9f:33:96:06:9c:55:f8:df:
         68:31:91:5c:d4:b9:be:31:6d:d4:34:1a:f9:b9:9c:be:15:37:
         61:7d:a6:58:cb:be:e3:4e:99:53:d2:15:73:9e:69:b4:7b:c1:
         eb:ac:c6:78:16:9e:b1:60:ef:03:ae:b7:f5:9b:e2:f7:d4:14:
         7e:bf:81:e6:10:38:98:6a:0b:c3:0a:23:d4:0f:41:e8:82:c9:
         4d:72:b8:2c:66:a4:87:e8:cc:2d:ee:84:8c:6f:7a:7d:8a:9e:
         bf:5a:73:e2:ee:49:2a:59:ae:9a:6d:04:7e:9a:a1:06:5c:4d:
         91:69:2f:07:9c:30:06:d8:77:7e:72:5c:44:03:0c:2b:93:05:
         2c:ce:6c:f7:87:ea:c2:4d:93:be:a8:62:4f:bd:c6:2a:43:72:
         20:26:f8:6d:f2:8d:b1:74:b3:33:50:85:c7:2b:78:41:d7:b5:
         d9:6d:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 15:17:51 2025 by rpki-client