Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa
File:                     79bcdb32-83aa-3ea4-a571-82541474b0d3.roa (raw, json)
Hash identifier:          zp3GI+fklOsg9l2gTZ7O/t9i5aZz8i91QR3GhgGd5qQ=
Subject key identifier:   EA:75:62:26:24:75:C0:31:C8:C9:42:34:66:4A:29:81:52:A2:F8:A4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1F34263EF2235BFDA077620
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa
Signing time:             Tue 05 Aug 2025 17:01:55 +0000
ROA not before:           Tue 05 Aug 2025 17:01:55 +0000
ROA not after:            Mon 03 Nov 2025 18:01:55 +0000
asID:                     23473
IP address blocks:        2607:f750:2900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:f3:42:63:ef:22:35:bf:da:07:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 17:01:55 2025 GMT
            Not After : Nov  3 18:01:55 2025 GMT
        Subject: CN=00d30773-d2a8-4fe1-bbd2-d7a02697c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:62:46:e7:32:b9:2e:2d:81:35:c6:57:8e:
                    ff:4f:aa:2e:bf:b3:41:53:bc:2c:af:d0:cf:c9:61:
                    ad:96:62:55:1c:c6:d4:da:d9:d0:33:82:91:78:cb:
                    18:ab:93:eb:ce:39:f8:84:a4:b3:8c:20:31:3b:e4:
                    9b:55:61:13:d8:28:33:41:f9:b6:21:d3:d7:a0:b5:
                    a0:af:25:92:93:32:0f:73:4c:0e:65:64:68:de:36:
                    5f:4f:6a:0c:30:e6:ed:1a:87:67:59:4b:4d:3b:9c:
                    57:d7:bb:82:a9:58:c4:7c:10:37:4f:fa:c4:9a:4b:
                    3b:96:bf:f6:22:9e:57:0e:a8:6c:91:7d:e6:a9:19:
                    b9:33:89:cb:98:49:16:49:8a:43:d2:2a:5f:02:d5:
                    4a:31:57:bc:6f:80:08:10:ca:12:6c:2e:e0:ca:44:
                    9d:c9:dd:c9:26:65:f9:e8:2b:90:74:0e:7d:56:9a:
                    07:84:e7:34:1a:0a:7c:8c:a5:e5:58:06:53:78:a2:
                    83:73:d0:5b:d5:4e:52:75:f6:74:1e:79:bc:59:b4:
                    89:cc:89:57:2a:5f:fe:da:88:7e:93:9a:a0:53:0b:
                    eb:82:c8:24:94:84:ae:7e:03:ee:6e:f2:fa:bf:1f:
                    ed:78:8d:95:38:f0:fa:ad:95:ea:a1:1f:38:96:7e:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:62:26:24:75:C0:31:C8:C9:42:34:66:4A:29:81:52:A2:F8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:11:69:9b:57:32:4b:ba:51:28:83:2b:fd:38:6c:c7:05:
         1e:9c:1d:f4:da:d4:47:93:0a:73:3b:69:68:87:07:aa:b5:bc:
         99:ed:fc:19:ae:55:ae:e7:17:e8:d4:d3:67:9a:c5:4b:ff:3a:
         b9:b3:14:e0:73:bf:d0:c1:e9:67:95:fb:cb:0b:fb:e2:a0:a6:
         be:f3:1d:5b:55:58:50:30:9f:b3:31:36:52:ad:65:46:84:09:
         7b:7c:75:97:a5:a8:c3:ba:14:ab:e5:93:9b:9b:71:61:50:e6:
         d2:69:29:99:08:ce:af:04:0f:f1:00:ac:49:a2:c5:fc:b0:7b:
         e4:b9:16:b7:47:90:b4:a1:b5:76:c8:52:62:26:6e:6d:1a:1e:
         c8:87:cc:67:a6:43:0e:3f:d8:cc:f3:2d:79:cd:74:2d:91:35:
         fc:ad:a4:5c:be:19:c1:e3:bf:4c:77:a0:76:50:8a:d5:c5:76:
         89:80:e0:5a:62:9c:6d:9b:d5:bd:1f:fa:16:32:ef:56:69:7a:
         08:4e:2b:69:09:39:af:51:8c:f6:bc:b4:c6:85:b2:d1:3b:eb:
         ff:36:51:50:99:df:2d:48:b0:69:f1:dc:99:7a:bf:50:7a:88:
         27:68:fd:c1:3a:15:ff:b9:94:24:dc:4e:92:4f:fa:21:90:73:
         fc:91:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:54:30 2025 by rpki-client