Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
File:                     7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa (raw, json)
Hash identifier:          3R5bUcg/SDLNnwQGoCOLyVMf8BF2fEfoLi/9W/1EfeA=
Subject key identifier:   DF:53:D0:8E:23:08:84:2A:13:C3:F9:80:5E:36:00:57:C5:9D:54:6C
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584A6DBB4730EA97B5D5030ED580
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     19651
IP address blocks:        2602:f9ec:ca::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:47:30:ea:97:b5:d5:03:0e:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=5c8e884b-eba3-47fd-8ccc-721dbe5e59da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:10:9c:f0:21:ce:8e:a4:5d:14:7f:f6:ac:
                    bf:70:e1:34:44:eb:a3:86:51:db:36:2d:13:9e:a0:
                    96:02:6b:7e:c9:d9:3a:60:89:54:d2:3b:14:0b:c1:
                    d4:96:cf:f4:a2:9f:da:17:f4:f6:98:ea:e3:07:10:
                    a1:ca:75:2c:ba:a2:09:41:41:fd:9f:45:9a:f5:11:
                    9a:b1:f3:1e:f6:20:2e:e0:af:3f:b8:ea:e2:db:05:
                    8d:ae:31:be:ec:aa:af:8b:00:2d:00:f7:b3:c0:e0:
                    dd:4e:16:74:1a:56:6f:93:a9:c8:bc:ce:1d:3c:06:
                    e3:ed:0c:0c:38:df:9d:49:e9:c1:66:99:68:5b:29:
                    c3:49:00:d6:43:c8:16:6e:10:7e:cb:e7:b1:c1:e4:
                    d7:07:72:70:76:18:36:38:af:99:68:a3:85:f8:e1:
                    a5:ee:60:de:79:83:f1:17:f5:0e:7b:38:dc:f0:be:
                    62:e0:95:0e:d1:8c:14:20:1c:27:9f:eb:35:72:96:
                    05:f3:b7:78:c4:ac:15:dc:c5:36:c2:ac:a2:dd:5f:
                    08:0a:27:29:87:b1:30:50:0a:24:3e:0a:a4:74:ee:
                    1e:30:5e:e5:33:c2:f5:85:f1:58:4f:7d:56:06:38:
                    1c:45:4b:99:32:0c:01:24:e8:cc:6f:cf:71:6a:a6:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:D0:8E:23:08:84:2A:13:C3:F9:80:5E:36:00:57:C5:9D:54:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/7711a2d7-6eb5-3b2a-9244-eb8270cbde55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:65:0c:83:7a:45:3c:dc:ce:5e:e6:40:91:be:6f:37:45:33:
         b4:61:04:48:72:40:f8:c9:23:d3:f6:6f:03:31:58:33:7b:8f:
         bb:f0:99:6b:be:65:31:f3:87:1c:b4:01:89:79:6b:3b:ad:ba:
         ba:27:ed:b5:99:c5:75:a2:c6:3d:b6:b4:ee:30:23:88:4f:f6:
         9a:f2:c8:25:54:31:42:f3:29:c6:04:22:4f:8e:ca:ec:8d:95:
         de:c8:5b:39:87:c0:10:d8:9a:c9:48:34:93:86:80:8c:66:0a:
         4d:97:22:20:22:ba:92:87:51:80:59:1c:f2:d1:60:87:7a:48:
         c4:c2:aa:05:bb:bd:e3:19:b2:1d:9a:88:67:16:34:1c:1d:8c:
         79:24:af:b9:16:fb:3b:d4:13:f8:1d:f4:33:a8:df:13:91:ec:
         28:2a:e5:b7:2b:ec:1d:63:d3:e3:b0:28:23:22:a7:58:dd:e8:
         b5:e3:07:90:b5:e1:e4:ca:f5:0c:f0:f1:a1:ab:0f:58:e5:6b:
         49:3f:11:d4:95:b0:e9:b0:37:5e:38:ca:62:a5:8e:07:eb:3c:
         a3:ce:de:a3:d3:46:eb:a4:bd:c7:ca:05:a6:78:0a:a3:d4:63:
         e9:ba:c5:72:35:67:f9:22:3a:7c:65:40:ec:46:5e:7b:81:cb:
         ee:e0:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:37:23 2025 by rpki-client