Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa
File:                     7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa (raw, json)
Hash identifier:          CBulNqUasu0s4XeQrX12Pcx/T3Dd7aTBUPScEkJRblc=
Subject key identifier:   80:AA:25:C0:B3:FA:AD:66:5D:78:C0:7E:B6:75:1F:8A:EB:87:B2:2A
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584A63F5B59429AFBCC41169F1C0
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     393607
IP address blocks:        2607:ee00:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b5:94:29:af:bc:c4:11:69:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=2d91a3e4-0bd0-45cf-9ee0-29ea69573199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:95:29:18:50:28:be:69:42:a0:50:86:51:
                    58:11:98:ae:5f:50:20:8f:eb:f2:f2:9c:f7:46:ef:
                    6e:66:f3:c0:9c:de:77:64:e2:34:e0:c8:77:ee:98:
                    ef:33:dd:3d:0d:6d:2f:a2:04:08:0f:d2:18:f4:81:
                    89:1e:7f:09:9f:79:1d:ab:1b:4e:02:32:df:e9:8e:
                    96:63:27:38:c8:62:ad:dc:4c:7d:47:6e:5c:32:ac:
                    a3:59:7f:18:de:14:5f:e5:43:8b:34:25:a7:9e:96:
                    c3:8f:f5:7c:45:1b:6d:d5:98:79:ba:40:07:26:4d:
                    b8:3e:f3:a5:23:01:19:3d:7a:17:77:6a:a8:58:eb:
                    78:a0:3e:f2:05:11:b4:24:79:8b:cc:70:7e:f3:64:
                    9f:b4:dd:3b:46:7c:3d:39:d1:8c:ff:10:61:51:f8:
                    c8:55:ba:66:77:4e:30:61:a6:33:e3:ec:d9:2b:e4:
                    93:eb:19:6d:ec:94:8d:31:07:59:20:aa:d6:c1:a3:
                    0f:00:56:06:de:5d:67:54:d2:99:8b:46:7b:22:7f:
                    9c:f4:43:78:6d:1d:82:4e:93:ed:6d:24:7d:a3:19:
                    09:2f:41:fa:90:67:61:8c:3a:78:81:35:48:43:64:
                    e1:dd:3e:e5:95:41:27:32:41:b5:68:d3:ec:1c:72:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:25:C0:B3:FA:AD:66:5D:78:C0:7E:B6:75:1F:8A:EB:87:B2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ee00:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:24:0d:7f:77:aa:12:dd:c4:e5:56:e0:4e:d6:c0:6a:a0:db:
         c3:e3:02:42:14:d2:48:2a:23:0d:eb:91:c8:e5:76:f5:8c:2e:
         93:8a:23:3c:f3:19:30:f0:8a:2c:1e:bf:fd:f4:b5:a0:3d:5c:
         e7:31:21:e7:f2:ec:5e:f3:bd:39:f0:64:d2:a6:7d:27:2a:fa:
         79:99:fb:1d:cf:db:85:28:a3:7a:bc:56:a6:d8:7b:94:62:b7:
         7c:19:f3:37:c8:5e:04:36:b3:3a:69:9b:1b:c9:cd:99:11:c9:
         4e:98:41:c8:1d:f6:e9:14:6e:3d:3d:15:dc:9f:89:f7:e9:28:
         27:42:87:ba:ab:22:5e:66:01:2a:4d:f8:e5:7f:0e:01:29:29:
         d9:14:cd:e9:5f:b4:47:8a:1f:75:72:f2:1a:fc:ba:8c:67:33:
         a5:f0:82:a8:31:c1:c0:cf:7b:c2:e9:67:02:b7:aa:4c:65:ed:
         8e:81:fe:ee:03:fe:6f:86:61:19:3b:e5:f3:74:15:53:1d:7c:
         da:e9:05:4f:25:5d:63:55:f6:2f:e8:7b:f8:3f:58:b0:a2:b3:
         4b:cf:a8:08:bc:b9:a3:49:07:9d:c2:45:23:05:be:6a:a3:c7:
         fb:c4:0c:34:19:14:df:b3:5d:35:09:d2:56:30:73:1b:a0:0c:
         5a:cd:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:42:14 2025 by rpki-client