Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
File:                     fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa (raw, json)
Hash identifier:          uvndV5UOwRMQ6DXP6GJ9S5GaO28W9mVIohiURpBzjSo=
Subject key identifier:   3C:97:26:9B:57:AC:E9:E2:5C:D7:7E:07:FB:92:52:10:58:4F:64:B5
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A14655E7284BC67EB2E43D990
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     198949
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5e:72:84:bc:67:eb:2e:43:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=961bef02-8f71-4b04-be4f-50aa3b4732f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:05:58:11:5b:8e:7e:14:48:34:37:7c:b5:
                    56:a8:0e:e2:65:05:2f:11:2b:10:20:b1:7c:46:bb:
                    fa:f5:b9:05:fd:52:4b:79:05:56:a8:c9:91:0e:49:
                    d1:f4:ad:e7:f6:cc:8a:ef:31:43:d3:52:2c:70:07:
                    b0:97:1d:bd:7c:87:9e:8b:d2:e5:e4:17:c4:24:ae:
                    82:99:64:5e:82:94:1b:25:e7:bc:47:5e:7e:54:52:
                    8c:36:04:a3:e8:7a:f7:03:8b:c6:1a:cf:76:3a:fe:
                    38:6a:14:a4:c3:7b:54:ea:fe:1c:f3:06:1a:f0:b7:
                    f8:46:2b:88:4e:c4:32:55:c4:99:51:c2:f6:61:10:
                    ce:1e:95:37:c1:78:ed:d3:76:a3:bc:37:9d:b2:10:
                    c3:75:fa:f2:15:6a:a6:7f:80:20:a5:3c:97:ed:29:
                    94:28:19:32:ec:1d:22:c0:c7:52:1a:b3:bd:d6:08:
                    6a:6c:b5:47:49:ce:ba:d8:39:c6:06:43:c5:be:b6:
                    6a:0a:81:ec:92:18:8d:b4:03:90:ad:51:69:1a:4e:
                    d7:34:9d:7a:32:ae:17:91:d1:ae:b3:b6:38:92:b1:
                    64:ac:73:6b:7b:7d:76:07:05:7d:a7:09:63:23:c1:
                    30:07:eb:c2:83:68:3b:09:42:cc:95:ea:f7:ea:74:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:26:9B:57:AC:E9:E2:5C:D7:7E:07:FB:92:52:10:58:4F:64:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:13:cf:27:18:c6:14:cc:ef:83:e7:bd:ce:22:b2:b2:97:
         2a:16:d0:03:c8:c8:c0:05:19:67:1e:e5:1f:1f:73:9f:0e:12:
         76:5f:53:a6:1f:56:af:9f:1f:8d:9c:9a:71:e9:ef:2a:06:5e:
         87:ec:48:cc:ea:0c:48:d1:64:b4:1d:a1:7d:62:3d:61:cc:6b:
         47:90:a0:fa:2a:8c:19:5d:c7:fe:24:f3:e5:61:0b:02:ef:17:
         bf:79:72:28:c2:d8:b2:ba:43:41:30:b8:a8:2c:79:2b:e4:c0:
         19:54:d0:75:89:31:bd:0e:ad:a7:a5:7d:57:04:87:f9:bc:54:
         fc:00:73:aa:3e:a5:35:58:6f:9c:04:22:31:db:8e:cb:1b:bb:
         4e:5d:fb:5b:fa:c8:ab:79:a3:dd:5f:7e:e5:52:01:64:85:16:
         29:e6:af:4d:7c:f6:96:0d:ab:83:96:57:5a:26:65:23:00:11:
         07:b4:5d:cb:2f:f4:de:67:27:cc:38:a0:a8:1c:90:c6:95:b0:
         14:8d:3c:83:53:6d:4e:f6:b5:37:3a:72:e2:c1:fe:bf:18:8e:
         44:3d:9c:a1:e6:3d:12:e8:56:52:a7:65:10:c4:90:aa:cd:84:
         30:d3:6a:67:b3:e9:91:03:3f:3a:c2:43:85:d0:69:f6:a2:2a:
         e7:7f:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:03 2025 by rpki-client