Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa
File:                     727b5527-61f9-3b46-8b0a-7f18d25908d0.roa (raw, json)
Hash identifier:          3U3ght1+iU3M2Vfswj6K8wnEvzv4VAWHCW9WFt2udvg=
Subject key identifier:   84:8F:B8:91:F0:62:58:F8:CD:BC:8F:F7:05:94:E2:1A:50:7F:16:18
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584A5FD486D78BDAF09BF158B080
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa
Signing time:             Tue 01 Jul 2025 13:30:46 +0000
ROA not before:           Tue 01 Jul 2025 13:30:46 +0000
ROA not after:            Mon 29 Sep 2025 13:30:46 +0000
asID:                     61112
IP address blocks:        2602:fa4f:b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:d4:86:d7:8b:da:f0:9b:f1:58:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Jul  1 13:30:46 2025 GMT
            Not After : Sep 29 13:30:46 2025 GMT
        Subject: CN=2797ac73-cff8-4441-a029-8aea7fb54a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:92:2c:ad:e1:b6:45:06:71:39:5f:73:0d:
                    be:0b:24:e7:89:a7:27:0b:fa:a2:15:ab:8a:e0:2f:
                    4b:76:85:07:08:2c:b6:97:00:72:a0:49:24:6f:f8:
                    31:bb:fc:e1:68:f3:fd:a3:64:eb:39:69:52:cb:46:
                    c3:66:94:13:67:78:c7:1a:da:cf:3c:d9:ff:19:ef:
                    10:d1:c2:64:d0:42:28:23:2f:34:02:54:56:67:ee:
                    d7:d3:40:01:ce:29:17:c6:6b:dd:56:b1:4f:c2:a2:
                    9a:5f:2a:c4:e2:b5:c4:d3:16:4f:ba:80:b1:32:e9:
                    53:29:46:fd:0a:e9:3b:2e:14:1f:32:5c:8b:be:29:
                    b7:68:b0:9a:70:3a:02:24:4e:22:d7:52:53:86:33:
                    e7:4f:4a:cd:76:08:02:b0:10:04:c7:a0:34:21:ed:
                    71:45:f2:79:59:15:bd:be:34:d8:47:d0:da:21:1a:
                    64:15:ce:4c:4f:49:c8:f2:86:f4:62:05:50:b5:a9:
                    0b:6b:59:80:9b:2e:41:4c:71:c9:c7:f1:a3:52:6a:
                    d2:50:23:63:e3:75:f4:2f:3e:f8:42:ba:95:9d:d8:
                    34:da:2d:c1:0c:c8:4d:73:fc:f2:2e:a2:87:2a:ff:
                    43:f4:24:49:cb:af:39:c5:6f:9a:ef:81:7e:80:ac:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8F:B8:91:F0:62:58:F8:CD:BC:8F:F7:05:94:E2:1A:50:7F:16:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/727b5527-61f9-3b46-8b0a-7f18d25908d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:b00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:49:1f:58:79:17:c9:5f:ad:89:40:5a:cc:a8:e8:eb:e6:
         82:0f:27:ac:0d:ea:f2:8a:37:34:91:96:33:b3:a9:47:a0:fb:
         aa:71:6f:b5:05:62:09:6d:5f:2d:19:62:a1:71:2f:58:06:00:
         24:69:32:4a:1a:6a:aa:ea:4f:25:34:7f:8b:fa:6e:c5:a2:e8:
         87:87:84:8c:c2:c7:6e:0f:e6:c5:67:50:ff:ef:f4:cf:28:c0:
         2c:14:e0:a2:9d:29:a5:e7:95:d2:e0:fc:19:8f:d5:6f:9e:ef:
         da:76:67:49:1d:dd:f2:39:c2:10:e9:0c:6a:f2:30:83:70:ec:
         8e:11:93:0b:a9:4b:bc:18:0e:5e:bc:98:1b:99:ad:d7:2a:d6:
         ea:60:62:7a:5b:39:97:7e:9c:f4:e6:3d:26:c2:ac:51:b1:33:
         40:e4:3a:0c:ab:27:3d:db:b3:b3:b8:86:7f:68:60:61:cf:38:
         38:5d:42:fb:00:89:9d:41:87:89:f8:a8:54:49:d9:e1:89:81:
         92:3e:e6:b6:9d:ab:16:38:14:41:5e:f8:7a:4d:7d:fb:d7:85:
         83:59:2d:e1:2b:09:0a:75:d9:78:98:b4:d2:03:ec:95:64:6a:
         f7:34:3c:57:60:f9:d2:a5:d4:fb:8e:09:9f:4c:c2:1c:9f:9c:
         69:e9:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:19:45 2025 by rpki-client