Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa
File:                     1f5af667-5392-32dd-904c-88223551c9dd.roa (raw, json)
Hash identifier:          gUY+Sh5WOmlemL0CKV2n1SNkYUfhU6hGra6Kft9AwEo=
Subject key identifier:   41:32:F2:9E:A6:E1:F4:5B:68:42:F5:4E:CD:B4:94:13:1B:10:99:1D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285849FE83A1B6704EB4F200836390
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa
Signing time:             Tue 27 May 2025 16:54:22 +0000
ROA not before:           Tue 27 May 2025 16:54:22 +0000
ROA not after:            Mon 25 Aug 2025 16:54:22 +0000
asID:                     11232
IP address blocks:        2604:7a00:f800::/42 maxlen: 42
                          2605:4a80:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:83:a1:b6:70:4e:b4:f2:00:83:63:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 27 16:54:22 2025 GMT
            Not After : Aug 25 16:54:22 2025 GMT
        Subject: CN=a1ee5d60-b369-4aec-ad94-bd4ec76fe697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:a2:ec:c1:51:e9:2a:5c:fb:72:16:61:15:
                    6d:91:22:40:0b:4b:25:82:e4:3a:8d:2e:2f:49:27:
                    dc:33:25:68:cf:c7:cb:98:9b:88:ea:05:9c:be:b9:
                    62:46:65:12:23:8b:32:51:2b:65:02:c0:03:7c:6e:
                    cd:d7:45:97:98:6f:28:93:82:bc:18:14:10:b5:35:
                    fc:33:4f:43:63:76:b9:88:93:6b:13:a9:25:d5:ab:
                    d9:37:73:8f:f9:b3:d4:9e:45:98:6c:8f:fe:9d:3c:
                    a6:b3:c0:52:4c:f6:f6:70:64:0c:8d:9b:a0:14:1b:
                    f5:8f:48:a8:c1:a6:7c:97:f1:98:9f:19:56:f5:29:
                    0d:a8:b1:01:12:a1:f2:a2:68:31:9f:c4:84:f6:7a:
                    e1:84:ed:95:d7:de:ad:b2:d0:cb:93:0e:9e:9b:1d:
                    fd:bb:27:45:ec:47:5f:1c:c5:97:2d:4f:40:a3:6c:
                    5c:2a:a3:0d:3d:20:50:06:d3:e9:3d:eb:85:aa:3c:
                    c4:f4:37:85:60:a8:aa:1a:d2:0f:b8:d2:97:1a:5e:
                    ec:a8:15:cf:67:58:ee:c5:c9:23:7c:f4:dd:20:17:
                    83:ef:ea:87:ea:fb:7f:d5:d1:73:79:07:b8:6b:7c:
                    92:e5:cc:76:48:57:c3:28:5e:5b:00:92:47:46:dd:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:32:F2:9E:A6:E1:F4:5B:68:42:F5:4E:CD:B4:94:13:1B:10:99:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:f800::/42
                  2605:4a80:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:81:f7:eb:7e:6f:a3:b2:97:e5:b3:79:2d:70:35:e6:d1:62:
         b2:75:3a:1c:a7:80:47:81:57:5f:7d:30:99:85:e8:79:d5:0f:
         b3:8a:cb:66:26:2e:c6:bc:c3:3c:c9:e6:08:cc:d5:64:6e:5c:
         23:c6:24:a3:67:04:bd:60:96:d5:5e:60:17:e9:84:06:86:38:
         97:f5:0a:03:23:63:22:c1:5a:be:4c:e0:3c:d7:66:17:4c:53:
         2c:18:ff:03:25:19:7a:09:2d:6d:24:67:2b:75:e4:2e:08:84:
         be:2c:de:f1:bd:3f:17:d3:d2:6a:23:19:6b:42:ca:f7:13:76:
         1f:e6:07:95:f4:5e:23:44:b2:16:58:b8:f2:48:29:0d:16:e4:
         15:a8:76:81:1a:4e:0a:f9:91:1f:10:71:9a:39:e4:fe:8b:db:
         80:54:33:c3:e0:dd:db:3f:6d:14:6d:61:86:17:79:2e:54:08:
         cf:73:dd:92:2a:b1:6b:26:ea:0f:0e:1e:06:f0:af:17:da:ab:
         99:a5:82:f4:be:05:a4:b4:c7:2f:da:88:18:47:d2:7c:62:a2:
         c6:2b:5d:86:7b:8e:c2:ac:3d:f6:39:60:42:1e:ab:3c:75:6a:
         b6:90:4a:1e:f7:be:f0:26:ba:62:2f:4a:3a:ec:df:0b:7d:fc:
         20:42:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:41:27 2025 by rpki-client