Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/795192a2-bfa0-398f-a054-5f5a2c943945.roa
File:                     795192a2-bfa0-398f-a054-5f5a2c943945.roa (raw, json)
Hash identifier:          EoUp1pSeUiBvN5sfDxHSLsqcdwHHwU2pzFPQrPCCV70=
Subject key identifier:   C0:F5:15:9C:70:C0:92:CB:9F:62:EC:D8:21:8A:AF:48:1A:65:AE:51
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A6F207152B709A67A3465D900
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/795192a2-bfa0-398f-a054-5f5a2c943945.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     32491
IP address blocks:        2604:4000:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:71:52:b7:09:a6:7a:34:65:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=223d2047-6405-4d6c-8df3-7299bd2aca19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:40:76:cd:8a:dd:c8:55:8b:ed:32:cc:81:
                    0f:64:ad:2b:23:d9:e3:b0:37:f9:59:d9:14:29:c3:
                    e4:7e:f8:65:99:ca:90:fe:6b:79:ec:46:10:3a:be:
                    c6:25:8c:c1:0d:cb:49:80:c3:df:37:5b:b4:56:7e:
                    1e:6e:8a:69:97:59:3d:ff:25:c1:4d:05:4a:d7:02:
                    3e:ba:55:be:d8:46:85:41:2d:1e:77:2e:d6:d3:ed:
                    cf:fd:4b:07:e7:bd:58:28:31:7d:d1:48:23:b4:30:
                    f1:68:a8:cf:8a:37:1b:81:00:1a:4a:73:b1:d6:43:
                    c0:56:e6:62:95:d1:36:4a:a9:48:96:6f:22:18:27:
                    78:16:a7:ef:1a:a6:61:a6:28:09:2a:a8:8d:78:39:
                    e8:10:d2:59:55:09:2d:9d:49:97:e3:3a:a6:18:af:
                    08:2a:ae:88:46:6e:9e:16:18:5b:d0:08:aa:53:f5:
                    d0:a1:71:06:c8:a3:0d:c3:f2:8b:0e:06:0f:58:ca:
                    d6:5e:85:55:5b:ce:8f:0a:50:5b:24:a7:32:9a:4b:
                    9a:2f:2f:35:34:d6:a3:96:27:38:a3:f8:82:d9:1a:
                    54:4b:47:7c:e8:04:7c:56:e0:8e:95:30:38:4f:1f:
                    8d:d8:e0:89:dd:61:a5:08:ce:af:3a:3e:03:ed:39:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:15:9C:70:C0:92:CB:9F:62:EC:D8:21:8A:AF:48:1A:65:AE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/795192a2-bfa0-398f-a054-5f5a2c943945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:05:26:40:d8:7f:17:10:e4:da:27:ba:44:b0:4c:5a:fb:
         2a:f0:87:f0:77:70:07:b4:4c:2d:a0:a9:0a:f6:7a:1b:0b:cd:
         4c:8f:a6:ef:ef:aa:52:f3:a5:c1:73:21:be:7b:f9:52:00:1c:
         75:1e:ac:27:12:90:72:56:86:cd:9c:48:2f:f8:22:62:b0:57:
         db:ec:f0:4f:4e:62:ad:29:01:8d:85:5c:2c:67:81:ee:17:08:
         67:26:e2:0e:44:ff:23:e5:dd:84:b1:e3:3d:d9:15:f3:d6:0d:
         c7:15:bd:a5:79:0c:56:7a:a8:ad:82:c2:8c:e4:9b:b6:7a:20:
         96:85:f7:c9:53:ef:e9:a6:d0:80:1d:f7:c6:d7:25:bc:c0:58:
         40:a5:73:8e:f6:6c:21:3f:c0:2b:85:6d:40:ad:df:89:5b:1f:
         4a:13:4a:e6:1c:d0:08:cb:2e:43:fb:81:77:49:c5:83:03:f1:
         76:cb:c4:89:5a:d3:b0:d7:41:00:31:48:f0:ac:8a:25:f4:ce:
         7b:15:e9:d2:5b:b7:ed:3a:a0:80:97:54:4d:99:01:6b:1a:27:
         91:44:d3:55:8d:a4:40:89:6c:85:13:ed:7a:08:96:03:00:f2:
         fc:39:64:69:55:7d:e7:9a:ad:97:19:e4:5c:77:86:df:91:1f:
         c3:74:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:45:57 2025 by rpki-client