Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa
File:                     817509c3-a98c-3db3-bc07-f23436da7d1e.roa (raw, json)
Hash identifier:          IlmQAENcR5dGdgaR9neS4aRPmqYeHYwCMn8WmQuATcE=
Subject key identifier:   2C:01:FE:CC:E4:C7:8F:26:EB:10:AA:90:15:A9:7D:51:0B:DF:E3:EB
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584A63F5BABA0008AEDEAE181DC0
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     7764
IP address blocks:        2610:20:2010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:ba:ba:00:08:ae:de:ae:18:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=6880ce23-9ae1-48d7-b34b-0253cac46017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:03:4e:4c:cb:45:df:dd:90:65:e2:32:2e:
                    e6:eb:3a:6d:b8:95:cc:c1:8d:35:3b:3d:2d:02:6e:
                    12:08:cf:13:3c:e0:e3:0a:42:8b:59:da:4b:8f:c3:
                    29:38:0e:c5:09:f1:92:dd:b6:7b:a7:5c:ee:eb:44:
                    ec:f9:70:29:aa:16:e0:14:d4:33:2e:39:d2:3f:a0:
                    e6:77:54:15:e7:a6:e5:68:c1:d5:cc:85:71:45:73:
                    99:06:4a:dd:7a:57:9c:16:f9:cb:08:a6:a5:aa:66:
                    98:65:e6:83:a8:cc:06:40:aa:e2:62:c7:22:31:47:
                    9f:fc:39:d5:07:f4:78:d7:5f:57:11:80:15:01:26:
                    37:60:69:14:6b:ba:24:27:13:d5:8c:e6:4b:ea:da:
                    7b:9b:25:f8:ca:c6:3b:68:58:85:96:d3:4f:b9:fa:
                    06:a3:2b:8b:da:e4:eb:86:15:82:a1:7e:23:50:ad:
                    17:84:ec:23:fa:28:59:2a:69:e8:8e:3d:7e:1c:16:
                    d1:5c:a6:ce:16:6e:d0:8b:dd:f2:67:ba:03:c7:81:
                    86:ef:b9:ed:63:75:32:80:0a:da:06:5f:39:07:57:
                    22:47:b6:3c:79:15:b3:75:42:ee:cd:39:98:50:08:
                    d2:f2:ec:cd:3c:4c:2c:a5:d1:17:e5:e7:7b:ae:60:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:FE:CC:E4:C7:8F:26:EB:10:AA:90:15:A9:7D:51:0B:DF:E3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/817509c3-a98c-3db3-bc07-f23436da7d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:bd:cc:f5:db:a8:dd:e5:eb:c7:09:b7:13:49:42:3d:fb:
         21:09:23:e7:52:92:86:55:ee:5a:0a:7d:63:88:1c:9f:96:54:
         9c:23:2c:11:0c:bd:0e:b7:0e:c7:5c:8a:1b:f1:13:6b:6f:05:
         d5:8a:8f:f5:cf:db:bf:e6:74:5c:ad:76:cb:a1:f6:d9:78:f7:
         54:79:c4:1f:4d:12:21:7c:e6:12:b4:48:d4:1c:ee:60:a1:a0:
         32:e6:08:cb:7b:22:f8:09:4b:20:f9:80:f8:1a:16:a0:6b:f9:
         cd:a9:e9:ca:a5:fb:25:a5:41:58:98:e2:af:cd:e3:63:ef:99:
         f8:36:9c:b6:c2:2e:03:4e:f2:6c:10:18:6e:f1:39:28:b4:fa:
         55:f5:aa:26:1f:d5:17:f6:1e:90:5a:77:cc:74:d1:64:8c:91:
         e0:cc:57:46:37:35:cb:9e:aa:da:6e:82:60:8d:68:e5:e8:06:
         04:8a:42:82:3b:96:5d:78:8c:d7:30:1e:4e:b9:4f:2c:63:8b:
         3e:15:27:da:95:cf:96:60:24:ab:a6:cc:e6:4a:ec:91:83:f5:
         3b:b3:ad:5d:5b:f6:dc:0a:b6:9d:a3:51:96:bf:81:76:ee:97:
         21:b1:86:19:da:34:83:98:c6:c2:8c:60:fd:30:88:e4:ed:78:
         b6:b0:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 23:01:37 2025 by rpki-client