Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
File:                     1c2f5541-75b2-3321-97f2-a972858e185b.roa (raw, json)
Hash identifier:          a1wLB4vk0HDXpVK866YH/GY4Mex+WBVtW+IXdkhAI/s=
Subject key identifier:   ED:8D:56:BB:E1:C0:A1:57:73:17:81:B1:EA:95:A7:80:22:BD:0A:6C
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A6AF09049C946D1091639FB00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     393249
IP address blocks:        2607:f8f0:1211::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:90:49:c9:46:d1:09:16:39:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=a8dcb28a-7f73-41aa-901b-870f7c785150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:5a:d0:23:a6:5b:c0:94:2e:78:e9:ca:a2:
                    1a:48:3c:3e:24:3a:9a:07:4e:51:cf:aa:ca:f7:6d:
                    45:bd:9e:51:5a:9e:d5:cd:4d:ac:0a:93:1b:87:e3:
                    28:15:86:66:8c:05:ac:a0:5f:2a:d1:4a:a4:88:d5:
                    e8:3a:76:92:4e:e6:29:2b:d0:f0:40:58:5b:80:78:
                    4c:a2:8e:bd:54:cb:3b:3f:ef:83:da:90:66:d0:f6:
                    b2:32:d7:f1:9d:cb:23:4b:e7:00:84:63:67:79:16:
                    9a:b8:21:b9:9f:41:50:79:ee:c1:2f:c6:6f:f6:26:
                    25:a7:e2:54:cf:73:2a:d9:01:d6:c2:89:ba:67:73:
                    c4:e8:e7:76:41:5f:03:f3:5b:51:1e:66:a4:c7:cb:
                    a4:bd:49:13:e5:43:38:6f:95:0b:e7:db:27:a6:4b:
                    7d:47:b9:ec:48:29:03:d9:a9:08:ca:4c:20:46:0c:
                    30:7d:aa:98:9f:86:46:42:08:7f:85:d8:37:fa:74:
                    54:62:ab:d7:e4:cf:10:ca:6f:35:ee:e8:b8:d9:f3:
                    9f:87:cd:62:df:2e:a9:66:34:cb:0f:a7:54:8a:ed:
                    2c:62:5c:20:4b:5d:83:b4:eb:f7:9f:b7:09:f6:19:
                    a2:b2:ec:eb:7e:ec:7b:b4:5d:1a:da:42:b8:33:45:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:56:BB:E1:C0:A1:57:73:17:81:B1:EA:95:A7:80:22:BD:0A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:2f:76:aa:83:6d:3e:db:fd:ea:9e:15:73:8c:d7:21:8c:
         1d:23:b5:8f:53:81:8d:2c:cf:5d:43:97:e3:bc:00:23:7d:f8:
         44:56:a4:86:fd:ef:91:72:0e:ef:bf:47:14:b0:b0:08:c1:1e:
         6e:3f:57:1b:c5:bf:27:f6:31:d8:f5:aa:98:6e:a6:01:ef:f8:
         17:79:92:56:ae:78:60:5c:b7:53:2b:cd:75:f2:8b:df:2a:a2:
         49:64:8f:ac:23:a4:16:8e:ae:0e:a7:60:f7:e2:04:1c:a5:0d:
         62:fe:2c:da:11:71:80:7a:be:90:a6:eb:20:47:46:f9:72:e7:
         bf:57:33:4e:81:a2:f9:59:18:86:d3:18:23:80:01:cb:b6:23:
         7e:dc:a4:c5:94:17:3d:0a:db:67:f3:93:39:49:46:97:10:bd:
         eb:37:f7:3e:f8:6b:f5:59:ba:51:b0:ec:01:5c:d5:ea:d9:0e:
         17:10:82:fb:dc:c4:c4:ae:10:a7:af:f1:2c:ec:d3:7a:7e:05:
         67:62:6a:88:27:12:62:5b:1a:11:fd:c0:b3:e2:d2:2e:30:9a:
         90:90:01:10:64:36:94:ab:24:dd:f5:5c:7f:8c:1b:c5:f4:84:
         50:5f:96:cf:27:22:19:54:fc:c9:cd:6a:85:d0:2f:cb:0a:40:
         38:d3:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 05:29:07 2025 by rpki-client