Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/52205995-84d9-33ec-9004-ea0d904e8dc8.roa
File:                     52205995-84d9-33ec-9004-ea0d904e8dc8.roa (raw, json)
Hash identifier:          nlFFKuCGgaL4dGnX0Gn6R0XKq4LzSsko6fYXIf4RlNg=
Subject key identifier:   88:BF:88:BA:75:48:90:51:8C:4E:15:82:1C:72:CD:DA:3D:7A:74:C4
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A9359FD07B186F7964F20
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/52205995-84d9-33ec-9004-ea0d904e8dc8.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2607:9f40:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:59:fd:07:b1:86:f7:96:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=c92a0336-64c9-4a10-b409-e83c5267c7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:13:69:ab:96:2c:4c:36:94:1c:05:80:7f:
                    01:55:35:dc:bf:1d:66:54:97:2f:cc:4a:cb:db:6a:
                    d4:e7:9b:bc:cb:b6:ed:ab:3d:e6:c5:25:d6:9a:f3:
                    6b:4d:2c:f9:a0:a8:2d:fe:02:55:08:d9:fe:dc:a6:
                    15:1d:b2:fe:e0:a8:dc:6b:f1:f5:24:52:82:eb:e2:
                    d2:c6:90:70:0b:04:e2:a9:f3:b8:72:b7:d4:79:3b:
                    36:0d:08:27:82:0c:bf:b8:72:48:7c:32:6c:1c:e0:
                    6c:0a:6e:8a:22:87:fd:6d:cb:69:49:53:79:50:d6:
                    62:bd:53:f1:92:8d:c5:72:ce:4b:80:30:ce:fd:ff:
                    a3:99:33:5f:de:27:72:bb:87:f8:64:7a:90:de:c8:
                    6d:4f:cf:8f:65:d3:ea:b9:e5:65:97:c2:14:59:db:
                    2f:4c:75:50:34:55:a9:61:03:2f:72:97:59:9c:a4:
                    b6:fa:21:f6:92:a6:87:e9:4f:84:d5:ed:42:5a:3b:
                    7c:83:ca:25:fe:08:55:bb:d0:bf:19:b5:25:51:06:
                    81:f0:d8:c4:05:67:a3:6a:92:04:ba:57:29:5b:42:
                    75:76:96:9e:ea:fc:fa:cb:0e:d9:b2:84:85:5a:f9:
                    e4:06:eb:b2:8c:fc:46:bf:39:09:17:e3:cf:5e:02:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:88:BA:75:48:90:51:8C:4E:15:82:1C:72:CD:DA:3D:7A:74:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/52205995-84d9-33ec-9004-ea0d904e8dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:a3:54:56:5d:f7:b2:25:a2:1f:bf:1a:e6:da:ff:a9:b2:
         7c:ea:d0:55:a6:a6:db:f1:af:11:b0:eb:8c:0e:e1:08:6a:42:
         4b:4b:2f:d0:a7:c6:be:61:2f:b9:5d:75:18:73:fa:0b:9e:b9:
         68:52:3e:bc:9c:10:e7:d6:00:48:4b:56:7b:11:08:79:b5:4b:
         ad:30:38:a4:52:9e:a4:b6:49:45:51:b1:9d:6b:ce:38:6b:55:
         cf:d9:ab:a2:39:b1:7b:a7:b2:cd:22:7b:a7:7d:38:ce:2f:15:
         ef:b2:82:fb:ba:30:c3:40:65:3a:45:c6:7a:1e:de:57:cf:c5:
         65:36:b0:2d:de:0a:f2:ab:6d:3a:21:8c:6e:d4:94:34:c6:7b:
         8c:a4:cb:b4:a0:4e:ef:39:8a:b4:cf:0f:ff:c9:d4:17:00:93:
         2e:f6:5e:91:e5:ac:5e:b8:d2:0c:5c:20:e3:c5:0b:d2:c8:01:
         ae:c5:64:ff:70:ec:ce:6d:d6:39:67:fc:24:fd:d1:8a:80:8a:
         3a:53:2d:f4:bd:09:a6:06:33:cf:f9:a5:88:c6:46:cc:78:b9:
         5d:e2:bf:7d:6e:1e:d9:ec:54:ec:93:e7:1a:14:00:33:94:eb:
         21:80:c9:1f:41:f7:66:a4:22:4b:5e:7f:25:da:84:82:ec:93:
         7e:47:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:11:03 2025 by rpki-client