Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa
File:                     0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa (raw, json)
Hash identifier:          GoKTc3XcPrm2quWaZIpFftCs9wNLFiveTEAFUDYrCHU=
Subject key identifier:   CD:A4:30:90:CE:55:CA:B5:C5:90:35:71:A9:79:20:2A:44:32:CF:AB
Certificate issuer:       /CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c
Certificate serial:       010D0C9F4328584A6C55E2C184F1C44194C18C80
Authority key identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     7992
IP address blocks:        2602:f7e0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e2:c1:84:f1:c4:41:94:c1:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=6241db12-d86d-487d-8e5b-b76fd8256f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:fe:68:0d:75:e7:f7:5c:ea:c6:5a:85:42:
                    75:0c:69:64:f3:37:3c:e4:9c:83:45:eb:3b:b9:66:
                    0d:22:fd:08:d2:b4:c9:1d:d9:c7:f3:65:88:c1:17:
                    7e:b1:fc:4f:3a:10:bf:60:e0:fb:6a:88:03:2a:20:
                    ac:b5:65:42:fe:a3:f7:56:aa:97:fa:27:a8:d4:bb:
                    b2:d3:8a:1b:84:65:92:f4:9e:74:f3:b7:5c:4b:74:
                    65:0c:e2:7b:3e:f0:3f:ea:4e:fa:f9:0e:f2:fc:b7:
                    4a:77:07:aa:cc:c5:dd:15:12:a2:c2:e9:6e:94:21:
                    23:16:70:d2:9a:16:ac:83:fd:e7:17:87:4d:ce:04:
                    9e:9c:04:72:97:04:49:10:0d:16:0f:79:3b:06:ca:
                    81:c0:33:74:f3:2e:62:d0:4a:63:0e:c7:96:cc:48:
                    1f:15:ca:f4:9d:4e:41:33:39:db:0c:42:66:4b:87:
                    6e:2d:af:8b:eb:b1:cf:4d:b4:b4:4e:70:1e:26:78:
                    ed:3c:b2:b4:99:ad:73:e8:d2:3b:00:90:15:c2:bc:
                    b4:a4:ca:26:9e:de:0a:69:8a:ce:d2:84:4d:42:25:
                    81:22:45:ed:9c:f4:02:00:1e:f5:c6:4c:ac:05:7e:
                    c6:a2:ee:9a:92:00:16:a6:dc:7e:12:c8:c3:e1:1c:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A4:30:90:CE:55:CA:B5:C5:90:35:71:A9:79:20:2A:44:32:CF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7e0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ca:14:b5:65:28:e8:25:08:78:cb:31:cd:03:ef:04:39:91:
         9e:80:05:1e:6a:6e:a9:04:01:08:bd:61:87:39:80:20:6f:4e:
         92:98:eb:d0:4d:fd:6c:33:96:46:a9:f8:34:b3:42:87:f6:c0:
         2c:d8:13:8e:95:72:2c:19:6a:98:0a:68:68:2c:57:9b:cd:d9:
         ad:45:af:a3:7e:af:3b:6f:bc:7d:21:1e:ad:d5:5b:ed:b6:39:
         54:8c:67:8d:02:dd:8d:c1:ad:ae:64:85:9e:2b:bf:be:97:f5:
         6c:a5:7c:b3:ee:c0:93:0a:c4:10:4c:e1:5c:0a:04:ed:d7:e0:
         f0:64:0d:ba:4a:83:97:e5:9b:dd:06:7b:ae:dc:bc:12:9f:00:
         17:79:73:ed:62:ec:ae:13:3c:6f:5d:e1:22:fd:84:5d:46:0c:
         ed:be:b9:b2:9b:4a:d1:c8:ec:f4:9b:c5:b4:66:05:64:57:fe:
         f9:28:40:42:62:68:a4:66:da:58:b6:43:db:0e:b5:ab:1a:6f:
         bc:88:ea:f1:71:c8:6a:2e:41:f9:23:57:20:e1:fe:5b:6b:82:
         eb:65:c6:39:63:b8:23:3a:21:c4:06:50:f2:de:01:1f:28:1f:
         6b:eb:d4:d1:5f:5e:61:2d:46:f7:c4:ae:6f:50:73:83:8b:b3:
         76:94:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 21:34:21 2025 by rpki-client