Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa
File:                     c5ff4d28-68c9-3187-8939-4157d657b3f3.roa (raw, json)
Hash identifier:          I4dDMmTRFTI6p//hs0q5gfgdBYnfDQZqiCYnCWmVJAE=
Subject key identifier:   72:16:3C:41:CF:98:D8:A6:D3:FC:9F:8F:6E:08:84:F5:C2:AF:A9:08
Certificate issuer:       /CN=465254d1-eb33-4b2f-b753-c2021a9446e4
Certificate serial:       010D0C9F4328584A6825FFD95BECAA73B4643180
Authority key identifier: 1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21662
IP address blocks:        2607:1fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:ff:d9:5b:ec:aa:73:b4:64:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465254d1-eb33-4b2f-b753-c2021a9446e4
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=37bc6d70-1860-4135-b188-85f4e82f632f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:29:64:e8:34:64:76:87:04:d0:30:5a:8e:
                    42:ed:f3:24:9b:a2:65:de:28:87:f5:fd:ad:99:23:
                    c1:60:cb:7c:05:a3:16:08:60:35:b6:73:aa:50:a0:
                    f3:4b:45:17:bd:5c:a9:72:73:b6:41:81:4c:8c:96:
                    d9:94:47:0a:3a:48:1a:a0:b5:49:01:8a:f4:c3:5f:
                    e1:96:6e:04:2d:b2:5a:83:80:1f:fd:09:1a:f3:aa:
                    04:c4:d3:5e:74:71:28:b8:d4:98:b5:06:f9:b1:64:
                    fe:fe:0e:e2:22:86:ff:54:04:67:00:0a:38:c2:de:
                    19:27:61:07:9c:72:99:37:b0:b4:52:3a:eb:de:41:
                    dd:7d:21:a3:4b:7e:ec:2c:55:c9:58:3e:71:4f:cc:
                    9a:65:b6:53:0a:a7:44:33:5f:a1:35:2c:9a:3c:eb:
                    a6:b2:8d:10:a8:75:43:38:14:6e:8d:6c:5f:a0:2a:
                    eb:98:00:56:00:cf:08:18:6a:3c:0a:30:7d:6e:3b:
                    3c:c1:f3:79:f6:9e:77:af:e9:b3:b8:2e:65:7f:2d:
                    c4:0f:51:36:bf:13:97:86:dd:cc:de:e1:fb:c0:65:
                    b9:7f:87:01:84:9e:34:2f:b6:e3:2e:25:9c:8c:eb:
                    89:28:7e:97:28:ab:61:00:e7:7f:23:b8:f2:4d:05:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:3C:41:CF:98:D8:A6:D3:FC:9F:8F:6E:08:84:F5:C2:AF:A9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/c5ff4d28-68c9-3187-8939-4157d657b3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.crl

            X509v3 Authority Key Identifier:
                keyid:1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:c8:78:29:6c:ee:ad:b2:72:ae:9f:5e:ed:4c:e5:e6:af:
         a8:95:cd:ca:d1:9b:c6:f0:af:5b:23:e0:72:76:12:80:89:ce:
         8f:7c:bf:57:fb:f1:25:f1:8f:38:03:bf:74:a9:91:a2:a1:f8:
         3f:eb:69:84:e8:cb:63:51:ec:6f:39:52:36:0d:91:b0:1f:1b:
         a4:4c:b1:59:2a:59:2c:fe:98:94:53:8d:1e:05:0f:b1:35:6c:
         a0:63:3a:6c:89:b5:90:56:6e:22:71:81:4e:9a:0b:89:52:a2:
         eb:8d:49:8b:e1:4b:62:57:91:d7:b7:97:27:5f:3b:a9:66:85:
         1f:c4:9f:5b:99:05:c0:f8:22:a5:80:9d:b2:16:9a:bc:cb:f7:
         03:df:6f:48:4c:b5:15:e6:4a:6e:34:d9:cc:08:ab:3c:7f:78:
         19:e2:23:ca:18:36:9b:eb:ec:08:d4:49:6d:df:a2:79:1f:97:
         6e:1c:5b:e4:d6:ce:d5:f2:9d:96:a3:b2:a3:d9:26:52:6c:65:
         85:4e:66:81:bf:83:9a:81:d6:cd:3d:ec:45:4f:80:f6:da:c1:
         33:b1:f2:8a:f5:80:49:49:ad:2d:a4:96:b3:c6:0e:98:ee:5f:
         06:05:6e:c3:32:f5:f6:5c:af:7d:02:16:ba:df:00:9e:d5:9d:
         f2:44:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:58:50 2025 by rpki-client