Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
File:                     2fc8f455-2632-3f35-9046-77d0559fc266.roa (raw, json)
Hash identifier:          lnuEIuyUI19TcOOtvqOrS4h5EjDu6k5otuw63Ixh7hM=
Subject key identifier:   F9:85:7F:B0:4E:16:D7:8E:C5:A2:CB:42:E4:B6:0A:17:A1:4D:2B:CF
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584A6F207A00C2BDA62666D6DE60
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     2055
IP address blocks:        2607:f390:1440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7a:00:c2:bd:a6:26:66:d6:de:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=98ad7c99-24a0-4bc8-b78d-3ba08dd604d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:1e:87:f7:13:aa:f7:47:40:f2:36:b4:e6:
                    a5:2a:cd:f2:0b:05:51:2f:bd:2f:3f:07:45:8a:17:
                    05:79:96:71:95:f6:8f:71:07:e4:14:52:5b:7b:8c:
                    0e:5b:ff:ff:d8:d4:bb:ba:c9:e0:74:1d:61:f4:70:
                    86:21:dc:cb:d8:b3:f2:a8:7c:49:af:4b:28:02:95:
                    db:b6:ac:30:fa:0d:f9:af:7f:f7:59:b0:2e:6f:6f:
                    7f:90:0a:e4:15:05:80:ca:44:8a:2d:d5:bc:df:22:
                    56:93:85:f3:45:4c:74:31:6b:a3:23:97:c6:a9:40:
                    9e:3c:14:c8:44:f6:64:48:3a:bc:72:69:b5:d9:7f:
                    ce:e0:94:35:60:50:0a:be:53:70:e7:5f:7c:d3:14:
                    7d:ce:12:25:51:fa:ad:d8:ba:b7:8c:e2:19:a2:30:
                    90:73:72:41:9b:54:63:de:5a:91:50:f2:de:e0:a6:
                    8e:c1:0a:34:ae:3b:c8:60:21:ea:ba:db:42:7d:2c:
                    13:3e:9a:83:fa:ce:da:58:b3:d1:2a:be:e9:55:95:
                    49:ea:46:d2:1d:75:e8:35:9a:0c:4d:5f:90:c2:02:
                    8d:96:57:7b:6e:44:ee:5f:2a:da:8e:94:4d:5f:6c:
                    a8:b0:ec:5f:51:e8:e6:f5:60:a8:83:c4:e5:6f:19:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:7F:B0:4E:16:D7:8E:C5:A2:CB:42:E4:B6:0A:17:A1:4D:2B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f390:1440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:87:c8:7b:19:22:86:b0:d1:a5:b2:09:8d:d9:ca:f4:9a:07:
         a4:fa:96:d7:24:4b:15:14:43:d5:e4:90:2a:d4:59:1b:23:c4:
         9f:2c:64:cb:a6:4d:17:94:a5:75:7e:ab:be:9c:5d:5e:0c:67:
         f0:92:23:ab:6e:56:f4:35:ed:a9:74:26:a4:e0:4d:de:c4:89:
         63:3a:f5:36:d8:33:35:b1:0e:e1:31:99:42:30:29:e0:79:3e:
         cd:f6:1c:11:42:c6:30:2d:f8:5b:a7:dd:88:f4:4d:25:77:43:
         12:a7:8a:4f:1c:9b:d0:08:2e:d8:ed:48:93:88:af:da:8e:d8:
         5a:52:cc:4f:08:e9:aa:61:b1:bb:9f:63:56:05:58:9a:4c:d8:
         57:61:c7:ac:e3:e8:f0:99:5e:92:63:91:f5:8c:fa:d4:ae:9e:
         75:9e:a4:ea:db:6d:bb:37:05:1d:23:43:6a:20:66:1e:3d:1c:
         1d:99:65:94:4c:0b:89:95:ba:7f:f7:2b:2d:59:e5:35:68:05:
         32:99:21:b8:4d:b9:c6:84:d7:5a:2e:fd:2b:57:f5:81:3d:04:
         93:bc:1a:aa:66:a0:a8:a4:cd:68:d5:a2:02:b9:43:5d:16:72:
         d3:99:9f:83:80:28:b8:ef:a2:c7:12:5f:b2:bc:93:93:2c:b8:
         2d:35:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 13:41:14 2025 by rpki-client