Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
File:                     7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json)
Hash identifier:          yCw+rQzxaA2pg/XsoOqZrHch3olEx00TsNAieDvU4k0=
Subject key identifier:   CA:99:2F:09:36:8E:D6:BB:25:7F:74:D4:AE:7A:71:E7:0B:BC:E8:F0
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584A093A9D6EB85CA5728AEEAB00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     3477
IP address blocks:        2601:a005::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:9d:6e:b8:5c:a5:72:8a:ee:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=2e95ce7f-9363-456c-9be7-445eb9ef1406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:51:b3:03:ac:78:ad:69:8e:f1:a6:11:0d:
                    ab:fa:68:44:b4:95:ed:ae:d0:63:b0:70:07:20:c7:
                    1a:77:56:68:24:a0:a0:91:4c:56:74:9f:ae:ba:7d:
                    b9:ca:e6:d9:50:1b:20:54:d9:5b:1d:ac:bc:e4:53:
                    11:bc:13:89:87:89:dc:8d:8d:49:73:ac:ec:67:f5:
                    20:83:e2:80:81:65:b4:44:6e:dd:12:67:88:af:05:
                    97:cb:a7:00:ba:65:c7:f6:18:e8:12:a2:15:ec:d8:
                    34:7f:8d:3d:97:14:2a:cb:f0:31:de:23:5a:f9:fa:
                    30:fd:c4:00:d9:6b:50:08:08:68:8e:c2:c3:38:c7:
                    89:94:c1:0c:27:af:cf:30:5d:de:e5:5d:a9:89:5c:
                    3f:cd:4d:12:52:a4:2e:79:4f:72:ea:11:df:64:b3:
                    34:7f:35:58:8c:dc:f9:ca:ba:fc:c6:2b:2b:79:12:
                    ad:6c:d7:f9:d5:36:ff:ec:70:b8:37:dc:87:98:da:
                    53:01:e0:33:7d:48:52:6b:f6:0d:54:1a:97:e2:7d:
                    21:1d:6c:c9:66:cf:a7:83:5d:48:e6:cb:cf:57:1d:
                    ab:d2:bb:78:26:c3:14:12:9e:23:ee:cd:32:4a:24:
                    db:c3:08:2c:ee:ff:1f:d3:50:70:6c:2d:f2:d6:88:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:2F:09:36:8E:D6:BB:25:7F:74:D4:AE:7A:71:E7:0B:BC:E8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:11:60:31:fd:e1:49:ee:a8:d4:a5:18:1e:48:b1:5f:71:fe:
         68:58:c1:21:e0:91:bc:cb:c0:86:78:fa:39:62:10:b3:7c:88:
         75:a0:f1:3b:40:ba:f1:66:0b:57:6e:a2:a1:7c:f7:e2:9c:0a:
         c9:4d:e4:c5:86:16:f2:af:59:81:ed:13:24:3f:a1:7f:47:dc:
         50:88:a6:1c:f7:0b:7f:5b:e4:9d:89:ba:59:cb:b9:4b:9b:0d:
         01:7b:84:3e:b9:63:3c:1b:f7:42:29:bf:34:a7:f0:a3:d3:0e:
         e4:f1:1b:36:14:f6:a3:e7:e7:fa:9d:41:dd:7f:93:37:0d:bc:
         ca:96:93:08:6c:b6:86:3c:df:61:4e:fe:b3:b4:d4:dd:f2:ba:
         d2:a3:51:41:f7:6e:90:77:de:5d:ba:1a:f3:e3:74:64:c6:0f:
         2c:59:88:11:ee:58:d7:97:3c:74:5f:4e:d0:e2:59:50:d4:87:
         36:49:c8:2a:a5:30:8a:bc:c8:12:a7:d1:e5:f9:45:c3:8a:a6:
         eb:07:01:05:0c:ec:3a:2b:73:cb:22:87:2b:97:dd:9f:97:2c:
         dd:ca:a4:70:fa:9d:75:64:5d:a6:56:7f:7b:3d:02:de:7a:8d:
         68:4e:14:c7:10:50:1a:ca:6c:01:94:f1:6f:8a:6f:ca:b5:aa:
         31:91:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:04:39 2025 by rpki-client