Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/75758e5a-4990-33d9-82f4-1807b1dcec41.roa
File:                     75758e5a-4990-33d9-82f4-1807b1dcec41.roa (raw, json)
Hash identifier:          doZ/h3KjB+EzlEbwXaZcKdswVCka/nYz0v0C+I4B40s=
Subject key identifier:   1C:31:87:4A:5A:05:38:E2:1D:16:03:90:1A:DB:33:3D:ED:EF:F7:44
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A938C644D00A162D7C2B8
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/75758e5a-4990-33d9-82f4-1807b1dcec41.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2607:9f40:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:8c:64:4d:00:a1:62:d7:c2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=c4e29c28-9730-4a99-aa2f-c65cc490bcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:35:b1:64:fb:53:53:23:db:9c:48:d5:74:
                    e0:0f:4d:88:02:2a:d2:5e:0b:9e:bf:ce:bc:2f:76:
                    96:fe:0a:5d:60:ef:17:44:f4:e0:d3:a5:17:3c:98:
                    19:bb:c0:c6:11:31:59:f7:11:f0:df:84:cb:7d:c4:
                    62:60:2b:64:eb:ce:f8:ff:6c:a9:01:ce:37:2e:c2:
                    16:ed:e6:b4:b1:9e:10:da:14:3e:36:70:e8:13:bb:
                    3b:d9:84:b2:91:8a:c0:f1:5c:45:9f:49:ec:e1:1d:
                    1b:e1:b9:8c:7e:9f:3b:0a:16:3f:e4:f8:0c:f6:a6:
                    06:0e:c5:d1:4a:24:60:c6:da:a3:ae:6c:be:af:e5:
                    7c:bb:88:f8:27:1b:16:cd:8e:30:49:1b:a5:4d:93:
                    03:58:cc:30:17:c2:d8:a3:1d:bf:12:94:97:5f:c0:
                    8b:47:50:65:89:98:51:16:e8:b0:7c:24:49:88:e9:
                    e7:c9:0d:64:ec:93:10:90:a3:9c:1c:8d:25:0f:92:
                    c7:34:c2:ac:54:6a:0d:04:8b:e6:58:8b:b3:6b:91:
                    ba:c5:72:51:c0:a6:43:2f:b2:1b:78:ac:da:0c:22:
                    4d:80:2c:ac:bf:b6:2d:33:db:58:80:c6:49:38:bc:
                    a1:88:c8:8b:ea:9f:95:d6:12:b0:81:1e:a6:d1:13:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:87:4A:5A:05:38:E2:1D:16:03:90:1A:DB:33:3D:ED:EF:F7:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/75758e5a-4990-33d9-82f4-1807b1dcec41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:22:a2:df:43:59:73:79:22:18:76:d5:18:d3:83:52:39:3a:
         8d:bb:ab:41:ff:46:b0:75:c7:07:cd:e9:82:13:29:88:24:e5:
         3d:d9:20:fc:06:53:25:f7:36:ba:21:2b:26:e0:95:b1:2e:b8:
         a5:a2:d5:4e:68:a6:47:e6:b1:ff:c9:ff:e5:cd:d2:2c:07:8d:
         f4:c3:20:92:fd:a9:00:50:56:f0:92:b4:de:f8:98:7a:08:8a:
         fd:c1:11:0e:c2:4f:7d:4e:72:1e:7d:6d:39:da:2d:26:46:0c:
         80:f1:a4:13:63:0f:07:af:6e:98:30:f0:7e:ad:3c:76:af:fb:
         39:c3:2a:60:31:a0:3c:18:ed:cb:81:4e:54:04:1d:ff:38:3f:
         80:f6:27:2e:b0:46:8d:da:cb:fd:b2:84:bd:36:52:52:7a:07:
         4e:94:2b:39:0b:c1:c1:8c:96:96:65:7a:5b:2d:c5:d2:9b:da:
         e2:75:fd:a6:b9:aa:cc:5b:66:5e:b1:e6:96:e7:8f:94:b8:36:
         5e:09:19:07:1b:e4:1b:e4:a1:d8:77:a0:8c:6a:80:1e:51:57:
         69:dd:d7:71:81:4b:3a:29:b7:d2:db:ca:98:c6:63:c6:95:5d:
         0a:7c:04:d3:5b:73:11:3b:09:7a:08:89:13:3f:55:d1:86:2a:
         cd:43:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:03:54 2025 by rpki-client