Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/59eba02d-28cc-3453-b5d3-a5bbf5e98306.roa
File:                     59eba02d-28cc-3453-b5d3-a5bbf5e98306.roa (raw, json)
Hash identifier:          dhe27asTmE4DoYu7awKof1i4QVmtIqRnPDVK/5fYAzY=
Subject key identifier:   30:BC:39:FB:AA:87:26:B1:42:85:C8:B1:09:AB:B9:19:21:F5:49:56
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1F3C09BE28D421FB5D16E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/59eba02d-28cc-3453-b5d3-a5bbf5e98306.roa
Signing time:             Tue 05 Aug 2025 17:02:54 +0000
ROA not before:           Tue 05 Aug 2025 17:02:54 +0000
ROA not after:            Mon 03 Nov 2025 18:02:54 +0000
asID:                     23473
IP address blocks:        2607:f750:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:f3:c0:9b:e2:8d:42:1f:b5:d1:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 17:02:54 2025 GMT
            Not After : Nov  3 18:02:54 2025 GMT
        Subject: CN=19d0d230-9116-4cdd-99a1-3d7bb432352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:b1:d5:c3:af:03:5f:89:fb:8e:49:b6:60:
                    19:5f:1a:69:4e:ed:a8:80:46:01:74:39:8c:70:a5:
                    31:44:24:9e:ed:0d:d2:68:9e:c5:4f:8a:45:97:13:
                    98:da:63:b3:2b:28:54:44:db:99:40:fa:00:ba:8f:
                    10:d1:d2:13:2a:8f:38:08:e4:e3:e4:6c:46:76:7f:
                    2e:9a:ae:b6:cb:b2:cc:dc:57:02:80:f0:c8:82:65:
                    f0:d0:59:05:72:b5:17:9a:b2:a5:71:ca:0b:b4:46:
                    5f:62:4d:94:51:93:17:60:9d:70:7b:74:a4:b9:ca:
                    f3:e8:8b:c7:9d:be:a3:94:b6:23:ae:d3:d4:ff:a8:
                    dc:3e:ab:9a:0c:6b:52:fd:b9:7d:4a:22:c3:74:a3:
                    cc:6a:68:bc:2b:e1:03:01:48:08:c0:a1:12:7a:9b:
                    d9:d5:2c:63:e1:36:6b:55:e5:29:67:41:cb:7f:f3:
                    9c:12:4c:78:f0:ce:6d:c7:5f:a1:20:9e:a4:40:a1:
                    44:8b:d8:1d:47:48:c4:01:87:93:b2:3d:5a:5a:42:
                    ca:e6:5a:69:3e:12:75:c5:3b:55:26:45:40:69:8a:
                    a1:19:ef:bb:d3:8f:b9:5a:11:52:43:c6:67:ae:00:
                    31:0c:4a:ce:81:27:01:d0:65:52:71:60:ee:15:95:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BC:39:FB:AA:87:26:B1:42:85:C8:B1:09:AB:B9:19:21:F5:49:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/59eba02d-28cc-3453-b5d3-a5bbf5e98306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:f5:20:d7:76:bb:8e:3b:db:fc:e5:f9:00:b5:57:db:c4:
         d6:6f:bc:a9:61:c3:29:c1:ec:23:6f:36:65:c6:5c:d8:10:ae:
         bb:42:34:2c:64:be:e7:ea:cf:71:53:79:51:57:e9:59:9c:b5:
         ab:89:08:ab:5a:69:02:88:0e:0e:ab:ea:88:c8:1c:7c:25:0e:
         f7:2a:43:3e:3b:a8:a8:d4:2e:9b:d8:be:1f:e6:e0:66:90:88:
         6e:58:66:9b:36:41:a4:bd:a6:73:09:94:47:fa:2a:5c:18:18:
         2e:96:59:8c:f1:b1:ef:76:aa:0e:0c:ba:dd:b6:c0:3b:61:a9:
         4e:14:e7:08:de:18:40:4c:9c:7f:f7:fe:63:2c:22:23:87:d1:
         c9:36:33:e8:40:90:93:f6:fe:20:3b:31:61:a8:a6:53:d9:94:
         3f:d4:d0:b0:cb:bb:0a:57:ef:f5:fc:80:d5:2a:3e:42:77:f2:
         f4:ff:0c:3b:ce:f9:a0:96:3f:22:32:99:03:60:9f:6a:7c:46:
         d3:fd:29:63:06:1f:32:e9:2b:f3:4d:be:a9:dd:e6:34:7b:c2:
         4f:79:4e:53:5c:56:81:57:b0:d9:af:77:dd:c4:c7:71:e7:78:
         74:df:75:79:53:53:77:f7:c2:f7:d7:9f:23:4f:a2:0d:ae:b4:
         82:9c:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:53:55 2025 by rpki-client