Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
File:                     0bae15f7-91c4-3d47-8748-73a43c11976e.roa (raw, json)
Hash identifier:          C1vtWDy42fQBPCrdc1boOPS63rhrKFE/9h+XTAI36MA=
Subject key identifier:   1D:AB:80:E0:64:FE:EE:08:22:C3:1B:9B:0F:1F:65:3C:CF:AD:49:AA
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584A6F2070C5C33FD69807125CC0
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     19830
IP address blocks:        2607:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:70:c5:c3:3f:d6:98:07:12:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=57fba74a-bdf2-4944-a6bc-c9e6e15794ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:b9:0a:b3:bd:87:9b:c4:a9:0b:88:f8:bd:
                    69:e8:56:bd:34:3c:92:b6:26:ca:ec:92:54:8b:f0:
                    eb:ed:e9:88:08:80:c5:35:cc:a9:68:65:da:56:91:
                    2d:91:91:a6:49:43:bf:44:98:3a:8a:a1:19:74:fe:
                    4f:0a:f2:4f:93:ea:f5:46:82:a1:eb:dc:15:50:10:
                    7e:24:fa:97:81:56:fe:be:f2:74:43:78:cd:af:9b:
                    1e:a3:61:2e:7a:6e:12:ef:23:9b:ef:d2:74:16:5f:
                    42:a4:2a:16:21:97:d3:b6:ca:3f:aa:a8:7f:56:47:
                    4f:c5:5e:d2:86:ab:26:7e:e6:e3:b8:89:50:fe:9e:
                    8d:59:87:29:8a:0b:3b:de:88:88:ca:04:11:95:c8:
                    ce:88:fd:12:62:98:2e:f6:af:8b:7e:1a:ea:57:90:
                    cc:a5:ba:0e:6b:59:77:97:c6:22:e7:f3:d7:d1:b3:
                    80:c9:2d:b5:6c:c7:26:45:fa:b3:a6:17:bd:cc:69:
                    e0:2e:a2:b1:0a:be:99:db:81:53:84:72:62:db:30:
                    67:e9:15:32:7c:38:81:74:65:76:ff:45:eb:fd:62:
                    b6:f8:0a:fe:47:4c:b7:66:1c:ad:e4:e7:8f:0e:9d:
                    3f:0c:fa:69:e3:fe:fe:90:fa:b2:79:df:c9:49:ff:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AB:80:E0:64:FE:EE:08:22:C3:1B:9B:0F:1F:65:3C:CF:AD:49:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:d9:7f:d2:e1:c3:9f:71:7f:65:0f:2a:f0:38:45:8d:90:
         54:75:da:ca:8d:39:f5:e4:a7:cc:e8:38:58:8e:01:3c:af:d0:
         fb:59:49:bc:f5:7c:ef:e3:cf:54:b1:9e:ea:aa:cf:41:85:8a:
         b6:6b:08:ad:1c:bd:bb:a8:57:29:4d:10:10:10:2f:52:f5:b1:
         d8:1f:72:e0:c8:25:cf:86:08:40:6d:a4:06:91:67:08:b0:86:
         b5:b5:4d:c5:55:c8:17:3f:58:a2:f8:61:67:3b:37:e3:24:f5:
         8b:a1:41:bb:40:31:82:04:ca:8d:2c:33:e0:6d:42:29:51:08:
         2a:55:57:70:33:e6:92:19:4b:c3:fc:3d:97:9a:e2:49:05:d6:
         d2:d9:f7:07:4c:38:73:df:de:07:ba:50:99:16:92:af:30:af:
         cb:6e:b9:73:69:15:0b:e2:5d:27:94:a0:0a:54:c9:fd:71:79:
         80:45:88:78:bb:d4:2c:42:f6:73:e5:e5:8a:d0:1b:c0:28:87:
         2a:93:ba:70:42:16:91:11:6f:e5:a0:ee:a5:f4:45:4f:da:87:
         d4:c1:d7:79:b1:06:0e:3d:80:86:2c:dc:5b:ec:f2:10:bc:99:
         0e:fa:bf:f7:ba:1f:4d:31:46:fb:47:53:5b:07:2b:40:4f:21:
         55:5b:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 05:28:21 2025 by rpki-client