Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/83d7d19f-586b-3a91-8c2c-1da24916b89f.roa
File:                     83d7d19f-586b-3a91-8c2c-1da24916b89f.roa (raw, json)
Hash identifier:          5rg2cnWBMRMtpz9jTLVX1Y8NA3CXJImDgehXPIVF5f4=
Subject key identifier:   1F:66:A8:9C:16:58:8E:D4:4E:80:ED:C9:E4:3E:50:5D:F9:EE:66:D3
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F43285849D85FA188882C54710BE954C0
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/83d7d19f-586b-3a91-8c2c-1da24916b89f.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14773
IP address blocks:        2620:1d5:ff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a1:88:88:2c:54:71:0b:e9:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0bd11e18-bf95-4f59-92e8-5073eb8d3358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:ae:4e:cb:2d:4b:8d:d3:e9:d0:90:b8:ff:
                    bc:08:95:3d:29:7c:91:f9:2c:fa:d7:04:ae:88:18:
                    99:8f:2a:58:b3:41:03:68:51:37:40:d0:1c:d5:c8:
                    79:b9:b6:97:ef:2f:58:45:0d:48:dc:0e:c7:c3:19:
                    b8:0e:a8:4d:1e:5e:ce:45:fa:ad:f4:b0:72:ae:0e:
                    3c:89:2b:eb:4d:cc:0f:93:77:3a:ff:a3:e6:80:56:
                    06:d0:95:4f:ea:1c:8c:59:9d:c5:46:6f:5f:ce:66:
                    e3:1b:fa:6a:db:3c:a0:cc:49:6c:58:f2:a8:c4:a8:
                    51:75:2f:7e:a3:25:6d:e3:94:d1:33:89:4f:ff:ff:
                    a1:6b:df:0d:f9:9a:8f:51:42:36:bb:7e:6e:29:76:
                    6c:ba:fe:ed:0e:8f:70:42:82:7b:ac:83:64:8d:63:
                    b4:e6:b6:51:1a:32:a8:f4:a7:ab:05:89:f8:91:72:
                    cd:2d:0a:a8:b3:18:48:79:39:ed:35:9c:f3:3c:c4:
                    7a:85:7c:b1:96:28:cc:4c:71:9c:c7:e0:06:77:a3:
                    2b:31:d9:80:ec:a5:88:0d:cb:49:05:fb:2e:b5:38:
                    02:5f:ca:91:12:20:b0:59:15:26:e6:10:64:6d:18:
                    04:86:18:38:a7:6e:ab:49:96:6a:98:22:0e:ae:8d:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:A8:9C:16:58:8E:D4:4E:80:ED:C9:E4:3E:50:5D:F9:EE:66:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/83d7d19f-586b-3a91-8c2c-1da24916b89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ff0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:82:17:45:8b:37:6e:3b:c1:d8:79:13:d9:b4:8a:dc:65:a0:
         38:bb:19:a8:03:03:74:d6:7a:e1:dc:3a:1e:42:7a:8c:90:38:
         79:50:e4:97:3e:70:52:bc:5e:17:77:d2:b5:6b:c4:4f:23:0d:
         56:66:4d:1d:ee:68:aa:f0:ca:19:17:02:76:63:05:55:73:22:
         60:41:ed:11:6f:5f:69:38:20:fc:73:3f:3d:12:fd:17:7e:1f:
         13:f8:97:a6:09:b7:e8:65:68:ce:02:3e:88:a1:af:4f:8e:f9:
         3c:8f:62:35:7d:32:6a:ff:b3:84:d3:cb:bc:66:41:88:61:7d:
         15:10:ed:e0:81:1b:e4:aa:1e:b4:fe:d9:6f:b4:21:7f:9a:18:
         d4:14:82:d6:9d:10:dd:4a:b4:8a:c8:5d:d2:34:a6:31:4b:ac:
         a9:0f:a1:39:3b:39:29:cc:06:1b:a3:4f:71:26:00:5a:d9:c6:
         f1:53:cf:f9:83:51:0f:17:df:0a:25:c2:5a:f5:f8:7b:c7:f8:
         10:1a:52:a3:84:a7:af:da:8b:e4:91:37:39:77:06:9e:cb:ac:
         9f:71:6b:67:74:27:b3:d0:18:07:30:b3:b0:67:b0:bc:0c:4a:
         33:40:1f:d2:95:e3:ee:60:47:27:54:e3:c5:02:55:34:bf:ea:
         fe:60:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:37:18 2025 by rpki-client