Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
File:                     d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa (raw, json)
Hash identifier:          ZwYLkXRwxi8w/BlIWs9wC1LayDD/IZlDu8IQnoUCUwM=
Subject key identifier:   14:5A:C9:18:9E:3E:85:76:82:97:36:5B:CC:29:21:04:43:F9:86:3D
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584AC2E107DAE6401998470FBB60
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     25899
IP address blocks:        2607:400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:07:da:e6:40:19:98:47:0f:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9a910f12-c494-4842-b353-a86b5c2db7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:16:d0:89:2d:e7:62:77:40:e3:96:17:f3:
                    5c:71:e9:c5:46:d3:10:c6:ba:5b:df:c3:68:18:9e:
                    11:a2:b8:1a:5d:43:65:c9:b9:bb:ab:cf:85:b6:0b:
                    92:4e:f8:e0:66:b2:10:5c:1d:b1:0c:57:7f:76:b9:
                    0a:bd:f8:c3:6b:6f:a7:23:79:1f:c3:4b:78:95:a6:
                    9c:22:26:47:60:d1:a7:37:98:bf:56:06:fa:7a:be:
                    ca:95:3e:6e:6d:27:e2:23:67:7b:1f:48:d8:59:8c:
                    37:6f:81:85:ea:2a:a0:be:dd:d0:6a:b5:74:2c:dd:
                    d0:45:f0:3e:39:c1:80:b7:6a:f8:41:04:48:88:30:
                    b9:64:02:90:9d:ab:71:7b:fd:bf:33:e6:8d:c4:04:
                    a4:8b:1d:7d:71:fe:b5:4d:df:d1:3e:19:eb:aa:cc:
                    a8:c2:7b:c8:3c:e7:55:9c:9c:08:1a:7f:0f:4a:e4:
                    45:03:7a:96:e4:38:23:dc:e3:6e:eb:3a:f9:bd:8f:
                    b6:f0:ab:63:58:08:cb:f0:a2:23:3f:9b:fd:8c:77:
                    5d:37:56:06:29:3e:f4:f7:c3:ff:47:ac:12:bb:55:
                    c8:00:ca:99:58:03:c9:47:a3:cb:39:ca:b7:e2:4a:
                    77:16:96:c4:63:46:f1:8b:b4:a0:cb:13:ef:64:4f:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:C9:18:9E:3E:85:76:82:97:36:5B:CC:29:21:04:43:F9:86:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:cf:37:dc:db:1e:ee:e0:b1:60:f9:a0:92:96:62:b0:21:
         cd:4c:02:4c:d3:44:25:c5:e3:c2:f7:79:c1:e4:ce:38:0a:77:
         7a:18:0b:eb:dc:8f:73:4f:6c:d4:5a:71:98:31:cf:77:7d:7e:
         70:f3:72:79:93:00:5a:e5:10:ac:85:eb:f5:80:67:5d:94:cc:
         3d:69:5f:e9:fb:4c:d9:39:11:31:81:f9:4e:d4:2d:ec:37:1b:
         f2:ff:21:71:72:8e:36:b3:71:f8:8d:d0:ec:1c:c1:68:2f:e1:
         c2:10:f8:a4:c9:13:7f:f7:5d:6c:c4:e4:eb:1b:4b:50:90:4b:
         3d:bf:80:3d:be:2f:45:f7:f9:b9:24:19:29:80:45:c1:26:e7:
         29:25:cc:5d:11:56:a3:20:52:1d:ed:f6:93:80:ad:9f:11:6f:
         5e:7f:63:94:6a:92:7a:43:ee:d1:22:bb:fa:df:58:90:cf:ab:
         d5:54:4c:b6:f8:4c:a1:06:33:01:41:b7:6b:ea:09:dd:1a:95:
         57:76:03:af:75:72:ff:50:81:6f:be:64:16:94:a8:63:ff:e0:
         60:f5:e2:3b:01:6a:8d:69:e4:b6:95:2f:4d:c9:e4:69:be:06:
         15:49:5d:f4:e6:05:f1:79:32:91:5f:c9:70:2f:ae:82:92:b7:
         7b:0a:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:24:05 2025 by rpki-client