Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ad2e9fca-525f-315f-9c8e-dc235d26e7f0.roa
File:                     ad2e9fca-525f-315f-9c8e-dc235d26e7f0.roa (raw, json)
Hash identifier:          tGwdxgLVO6fqrZpa9DMvB8B8Xzz/2b/GuS6T8sxOj0I=
Subject key identifier:   A1:92:09:91:90:7D:5B:BB:06:DF:6D:E2:4E:49:B1:FF:5E:59:CD:EC
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A937D4130B215CCA7DD00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ad2e9fca-525f-315f-9c8e-dc235d26e7f0.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2607:9f40:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:7d:41:30:b2:15:cc:a7:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=8386f4e8-3377-4a16-b707-742df135c2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:47:6c:4c:9e:c8:25:00:d4:15:78:dd:cc:
                    d2:cb:ec:09:3c:53:d4:1f:97:b8:cf:fa:cc:f4:00:
                    42:21:4e:3d:06:26:0c:dd:b5:4b:58:1a:7a:27:b9:
                    d2:af:16:63:ce:5d:b7:3d:3a:65:4e:92:8f:cc:90:
                    d6:3f:4b:73:cc:05:da:86:fb:93:f4:4c:af:ec:15:
                    78:0d:ab:79:bf:06:ef:d3:25:4d:84:a3:d8:bf:00:
                    55:12:01:98:be:14:78:d6:ea:42:3d:76:73:25:5f:
                    23:b4:a5:7d:02:91:7f:76:bf:70:0d:52:09:34:1e:
                    5d:20:8c:93:18:09:62:95:2f:27:1e:e4:7b:d4:bd:
                    e2:74:25:af:96:b1:86:50:e2:af:c3:07:a3:56:c5:
                    c2:42:f8:bc:0c:7a:cd:17:4f:b4:f0:7f:8b:ef:b9:
                    0a:fa:91:1e:37:b7:82:8b:4d:68:85:a3:85:1d:e1:
                    f4:b8:44:ac:b8:b3:52:1a:b0:f0:08:cf:42:8e:64:
                    89:2f:60:0e:f5:8c:63:d3:e0:df:a3:54:c7:04:76:
                    06:34:bf:7b:e7:95:a2:90:14:dd:48:ba:b7:fe:fe:
                    cf:a0:b0:35:34:81:9e:a3:b4:38:35:0f:65:8f:7c:
                    0a:67:d5:f9:60:0e:cd:5c:f2:f9:87:3d:6b:53:8c:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:09:91:90:7D:5B:BB:06:DF:6D:E2:4E:49:B1:FF:5E:59:CD:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ad2e9fca-525f-315f-9c8e-dc235d26e7f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:26:ad:dc:c6:00:c8:2b:20:da:9e:db:68:9d:cc:06:2d:2c:
         2a:e5:e6:af:f2:2d:e3:67:9a:05:ac:dd:f7:07:61:ba:31:73:
         79:23:c1:31:30:c1:17:ec:da:50:25:da:39:66:3e:b1:77:fb:
         7a:cb:ee:ea:31:b7:17:ed:37:36:0e:f1:84:db:c9:4b:8e:5d:
         ea:c3:92:d0:5b:66:5a:f0:33:b8:e0:75:e0:37:24:a0:73:a4:
         87:ed:3a:a0:eb:98:2b:8c:4b:1d:1c:2e:5a:fe:7f:84:10:b9:
         44:96:a0:eb:b3:d2:56:12:1e:da:91:b0:cd:df:14:6d:45:db:
         77:1f:e9:b1:ca:2b:b8:6c:74:36:af:0a:90:90:09:8a:1d:0e:
         e3:27:c7:02:ae:f4:4b:1f:4d:ab:31:77:18:eb:b4:9e:e6:4f:
         08:cd:9c:51:d9:2b:2c:fc:b2:29:1e:24:18:6e:9e:de:35:1d:
         0a:31:4b:10:87:1a:82:b6:38:83:41:4f:f4:dc:9b:7c:8d:94:
         7f:b3:29:f8:d9:2e:43:3d:b6:ad:22:58:eb:d3:0b:70:91:3f:
         28:1f:b8:09:61:64:a0:05:38:3c:5c:fc:af:34:1e:78:41:6f:
         db:a1:f6:d2:92:e1:4b:a8:35:ff:dc:86:f9:a6:31:dd:ed:c3:
         08:a0:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:12 2025 by rpki-client