Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
File:                     fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json)
Hash identifier:          aDcjj/PinuzY+IE4PPProlHpXK/oPXZ/W7S6/3QAXeo=
Subject key identifier:   9A:BF:50:FD:9F:9B:31:16:C5:6F:AB:C1:DA:8E:BC:B7:50:48:79:C2
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F4328584A7A4B387D5DDE041874C71F00
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     32484
IP address blocks:        2607:2ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:38:7d:5d:de:04:18:74:c7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=f90f49eb-5af8-4a7d-8c70-1ad303319cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:58:26:79:66:c2:61:f5:52:df:9e:62:39:
                    a5:77:b1:32:48:94:c5:74:64:c6:b1:87:8c:b7:31:
                    63:e8:9a:c5:40:b5:e6:13:fb:a3:12:56:70:96:7d:
                    80:a6:2a:ac:83:6d:af:32:28:28:11:24:07:10:f2:
                    57:0e:e5:11:c0:b6:0f:6e:99:54:bc:4b:db:e5:17:
                    b3:88:ee:33:5e:6f:79:cc:ff:55:96:79:28:bd:f0:
                    95:af:b3:40:e3:80:90:1a:0c:85:d7:5c:73:ce:fa:
                    eb:82:75:07:ab:10:cc:e5:0f:79:8b:4e:9e:72:6f:
                    2a:3d:3b:ab:06:db:fd:d9:62:b1:d6:71:90:c2:5e:
                    64:d0:fd:b8:10:dc:bb:68:19:4f:e4:1f:06:26:4a:
                    6b:31:e8:4d:55:4c:a1:3c:c6:4c:b5:81:1e:b8:17:
                    bd:15:e2:41:c7:5b:c8:be:a0:a4:b8:93:52:20:66:
                    a3:cd:3f:38:b0:61:76:33:a8:2b:c4:44:3c:42:ec:
                    27:2d:11:04:4d:62:1c:7e:e8:71:79:00:d3:0c:69:
                    2b:fb:b2:ef:1f:71:37:ab:31:e6:b6:12:63:a2:71:
                    07:fe:21:0e:97:73:06:50:f4:a3:0d:ee:3b:12:b5:
                    e3:57:df:1e:fc:28:99:c3:01:1a:bf:b9:a5:11:0d:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:50:FD:9F:9B:31:16:C5:6F:AB:C1:DA:8E:BC:B7:50:48:79:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:45:57:77:c7:b9:5b:5e:78:22:08:bc:ee:0e:5d:08:60:
         f6:16:aa:04:e5:a4:8e:9c:9e:0f:49:72:b2:d1:2d:03:80:7e:
         c9:c5:c3:b7:a7:36:be:32:1d:5e:b0:02:c4:87:2c:28:45:93:
         52:d0:15:86:4c:f2:30:5b:ce:f5:c8:ef:e5:4e:70:36:2c:dd:
         1a:0c:4f:e2:25:49:7a:3a:e6:ee:92:46:03:f6:f5:2d:a6:cb:
         21:62:f6:9b:cb:5e:98:4d:a1:22:1e:ca:45:d4:f1:de:3e:26:
         bc:0e:48:bd:3f:c5:55:ec:fb:a7:7f:cc:9a:e1:d4:56:48:79:
         25:53:c1:91:fb:41:3c:7d:7d:bf:29:7d:e2:02:0a:a5:e6:df:
         e0:9c:fe:fb:1f:2e:21:3c:9e:71:db:d2:7d:b4:b1:39:5f:93:
         b8:a5:0d:0f:9f:73:03:c0:77:b2:25:15:45:a0:93:cf:08:17:
         a8:5a:30:71:ee:0a:c1:d3:40:b3:9c:4f:32:19:52:c2:8e:50:
         6b:20:a9:e8:57:a3:37:f9:c0:a0:64:d5:60:c9:3c:ba:72:56:
         ba:15:37:51:66:f9:fe:e2:f7:e4:06:e4:2d:d8:af:d1:be:f6:
         3a:ce:6a:1d:62:af:c3:77:cb:d9:dc:bc:c8:66:78:43:81:51:
         de:6a:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:58:52 2025 by rpki-client