Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa
File:                     27772857-84f2-33a8-8a3f-87c1f9f453ab.roa (raw, json)
Hash identifier:          TyroPGZBFQEhLABXlOUkwFmSgc+QFPILq6dyyevIySs=
Subject key identifier:   2D:DE:E1:C8:9B:7D:3A:18:B4:9E:E0:55:4D:F8:EB:67:FD:4F:6C:D4
Certificate issuer:       /CN=9a5b5033-d8da-42ef-92ee-144938eb4535
Certificate serial:       010D0C9F4328584A612B102BD3361B71AB89AD60
Authority key identifier: 61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     30174
IP address blocks:        2604:e140::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:10:2b:d3:36:1b:71:ab:89:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5b5033-d8da-42ef-92ee-144938eb4535
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=1a3b08f3-30da-4113-b434-d629e10c10b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:4f:d5:9c:13:25:4c:ec:b8:07:f4:25:02:
                    3d:3e:35:f0:53:49:89:cc:d8:82:dc:0c:65:a7:67:
                    ec:68:ac:67:c8:29:60:f1:1c:1d:67:2c:95:f7:d8:
                    1a:ca:c8:ed:3c:64:12:ad:5e:ee:e5:ea:0b:6a:4b:
                    48:2b:6a:ce:08:c4:4c:8f:5d:bb:06:48:de:a6:fe:
                    9f:81:43:70:d2:b1:27:15:55:54:51:8f:cd:ac:54:
                    7e:b5:bb:10:22:4f:38:1f:1c:3a:61:df:0a:20:85:
                    d7:ec:22:79:30:04:a0:f0:87:65:ee:8c:ce:d5:02:
                    23:13:e9:de:4e:ce:7c:78:1b:15:50:4c:a1:9b:91:
                    3d:c8:77:9b:9a:4e:4e:f9:74:71:c6:41:ff:83:9c:
                    da:d1:22:27:a0:6b:22:b5:91:89:01:c3:5c:59:63:
                    4d:b2:98:35:18:f2:28:f8:a6:62:c2:ab:12:3c:55:
                    a5:62:07:7c:f5:0b:f5:d1:f6:00:46:b0:65:0e:f7:
                    14:87:fa:47:71:f9:9e:cf:8e:2c:9b:d1:5e:9a:e6:
                    2a:1d:05:03:9a:a8:16:83:b9:04:17:33:60:98:9e:
                    fa:2c:ce:51:17:46:f5:fb:49:54:48:88:b7:19:d6:
                    84:83:99:4c:d7:9f:72:7b:0f:e7:31:ba:d8:74:b2:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:E1:C8:9B:7D:3A:18:B4:9E:E0:55:4D:F8:EB:67:FD:4F:6C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl

            X509v3 Authority Key Identifier:
                keyid:61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:a5:1b:86:86:24:47:64:35:2f:8f:a9:89:a2:8b:a0:6d:
         44:36:d8:62:01:1a:40:81:56:ca:61:02:96:41:30:13:87:d4:
         e2:8c:a5:9f:87:9d:b5:c7:b3:a5:30:28:a7:bf:29:75:8c:9c:
         e9:33:df:1b:ba:80:f3:43:26:bb:c2:95:60:ed:c5:47:b4:3e:
         47:68:e6:aa:be:0d:a6:46:5f:95:b2:26:e0:95:6e:37:11:84:
         44:da:ef:6c:75:2f:b5:66:84:ff:25:09:df:0d:c1:62:1c:c7:
         5b:ed:23:70:0d:8b:71:db:ba:cc:f2:04:ed:92:ee:94:a4:d4:
         2f:60:d8:00:c4:26:da:50:a5:a9:2d:73:a5:02:35:1d:61:dc:
         2f:29:7d:98:31:a6:4d:c5:c0:28:31:1b:df:b5:11:a2:88:10:
         bf:85:c0:18:1e:a2:51:30:54:c5:e1:86:3d:c0:26:ce:72:fb:
         dd:b5:83:75:62:26:8f:3f:3d:39:81:49:72:17:74:69:26:db:
         c4:4c:6e:84:6b:86:82:8a:31:bf:a6:83:93:05:1f:2c:5a:9e:
         cb:09:fa:21:1c:15:c7:74:c9:7c:4d:81:69:b1:09:d7:2d:18:
         71:5a:f0:60:c2:1d:59:66:8d:65:31:6d:06:3c:c1:c7:b8:b4:
         14:6a:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:15:53 2025 by rpki-client