Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
File:                     d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa (raw, json)
Hash identifier:          0N9U1nkIcT/bDabzZGLhid3maAnkYptT/wlP3mt3Unw=
Subject key identifier:   D4:0D:4B:5D:62:FF:0F:72:7A:6A:D4:BF:7C:04:98:24:FE:ED:15:CD
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285849E22539DD67B7E49E66E13800
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     25899
IP address blocks:        2607:400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:39:dd:67:b7:e4:9e:66:e1:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=57bd31be-ec69-4197-924c-8f1264aeaf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:de:72:c5:a6:55:ee:de:2d:10:2f:17:21:
                    4e:0c:ec:ba:c9:e2:20:bd:8f:dc:1b:f5:5d:bc:67:
                    31:67:07:be:1f:19:b2:38:0e:ac:6a:f2:c6:c8:86:
                    32:3b:98:28:ea:e1:97:cf:33:c8:05:8a:3d:7a:10:
                    9f:27:46:00:c5:f3:bc:55:bc:d3:48:20:5a:16:28:
                    00:d5:98:56:30:34:93:64:e7:f8:1a:f2:dd:ed:3e:
                    38:c5:3a:8b:18:fe:c8:3b:72:8e:40:a3:c1:da:32:
                    bd:de:13:c3:94:9b:37:c2:61:9a:95:22:73:4d:81:
                    96:40:fd:e3:06:f3:b3:49:9e:ef:65:8e:a6:5a:60:
                    19:01:2a:18:cb:0d:8a:b9:37:2f:01:91:e6:63:13:
                    37:53:b1:d2:07:ef:69:f2:a5:5c:69:0d:8a:7a:bd:
                    7e:15:12:98:b1:09:63:ae:c1:fa:90:3b:3a:33:ad:
                    1d:12:b9:3f:3b:0b:41:3a:2d:4b:ba:00:23:ee:68:
                    e9:2d:69:17:65:fc:fd:ed:d9:cb:f6:a9:50:c1:92:
                    3f:81:72:2f:a6:64:74:28:f1:4b:a8:db:9a:88:3c:
                    bd:47:ef:83:a0:51:8a:1d:f5:db:50:ea:c2:cc:a9:
                    fd:c2:02:fd:ad:d4:09:af:1c:73:5d:97:d3:b7:ff:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:4B:5D:62:FF:0F:72:7A:6A:D4:BF:7C:04:98:24:FE:ED:15:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:12:59:aa:e5:3a:47:25:99:4c:74:4e:05:d1:bf:ee:5b:
         8d:66:43:af:10:c8:ba:9d:c7:cb:f7:6f:e4:9c:e5:56:cb:1e:
         b7:03:fd:32:17:d0:33:a7:f5:b5:2c:48:be:07:87:4a:e1:d6:
         ce:48:53:36:9d:ee:29:e3:7d:e0:f6:63:ad:70:c6:55:df:b0:
         22:4a:97:7a:93:e4:b2:1a:16:3e:ca:d7:ff:6f:a6:c5:f2:ac:
         a3:08:ed:93:8d:b2:64:0f:13:0f:17:58:69:28:44:42:32:ef:
         66:90:82:9d:3c:06:3c:fa:27:9a:1d:dc:76:f4:00:0f:bf:44:
         d4:2a:68:9d:8d:bf:62:77:7f:84:83:b1:88:46:63:0c:ff:c7:
         cc:a3:73:ac:4e:f1:a4:c5:97:df:c6:f2:29:5e:f2:66:9f:69:
         3d:56:b2:90:d9:b8:8d:5b:5a:17:da:0d:2e:1b:78:1e:54:39:
         2f:ca:2c:8b:6d:37:19:e4:7a:1d:38:aa:04:99:ca:c2:54:3f:
         56:1c:4a:f4:45:64:c9:01:65:4b:91:15:e6:44:d1:b2:5f:54:
         9c:21:5b:0f:0b:0f:f0:d1:af:7e:7e:71:dc:75:94:53:68:f6:
         0e:f4:b2:c2:00:a7:d5:9f:d7:f5:8b:e0:c4:2d:e6:ac:f5:3f:
         ae:a7:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:17:28 2025 by rpki-client