Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
File:                     42f72087-4467-3691-8acf-0987d8d58f26.roa (raw, json)
Hash identifier:          gK1JkZFPt602Jw/4ySAIoYbMg0MCTdaKATUyHp3wxBU=
Subject key identifier:   D9:69:EE:8A:82:80:07:0C:65:98:E1:FC:E2:8B:1A:4C:B4:E8:05:BE
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584A612B1E838513AA4C887C1B00
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     32709
IP address blocks:        2605:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1e:83:85:13:aa:4c:88:7c:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=f6e42a26-a8eb-4b1a-989c-74e7df551afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:77:59:52:0d:8c:c4:ff:57:f4:de:83:b2:
                    2b:68:0c:c8:f2:81:c9:2e:fa:ad:40:38:ac:0b:fd:
                    ff:0a:c9:db:15:f8:c3:f2:6e:78:d2:3d:80:38:f9:
                    7d:b5:cc:1b:c9:2d:a7:09:4d:93:e8:99:1e:a6:1d:
                    d9:17:2e:53:e2:76:e3:52:68:53:9c:25:9c:39:25:
                    14:f8:77:79:81:e2:5a:1f:8c:9d:3f:f5:69:cb:80:
                    ef:9c:e0:fb:a6:c5:04:02:99:f8:0c:47:81:52:df:
                    1c:f7:f6:2e:25:4d:87:20:6e:26:66:76:5d:01:cb:
                    09:03:93:de:58:cd:fc:0f:7a:67:ac:be:a1:f3:d3:
                    42:b0:10:e5:75:dc:09:25:ef:2f:94:9f:0c:1e:6e:
                    1d:6b:ee:61:3f:c2:40:21:b7:85:9d:22:ff:33:a4:
                    c7:50:90:51:3f:ce:67:10:df:43:18:2c:df:df:b3:
                    08:a3:4d:8f:e4:bc:77:5a:59:26:e7:69:b8:06:3d:
                    c7:14:7f:ee:12:47:67:eb:63:9c:49:ad:c9:ff:44:
                    4b:1b:29:84:cd:f6:d9:20:2e:85:90:91:ce:e5:5d:
                    7d:87:1e:57:da:4b:91:1e:b4:67:ef:e0:84:b9:7e:
                    af:3e:50:d0:78:89:c3:c3:79:b1:5b:d0:f2:79:de:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:69:EE:8A:82:80:07:0C:65:98:E1:FC:E2:8B:1A:4C:B4:E8:05:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:2a:75:38:91:1a:a4:1e:32:91:5e:22:cd:33:c0:b9:00:
         76:a5:5d:f1:c3:64:7b:d8:92:85:d0:10:c0:d4:a9:ab:49:b2:
         c1:98:da:87:b3:ed:b8:17:64:98:8a:01:ec:be:a8:c7:c5:9a:
         91:56:14:5e:04:d6:45:76:6e:32:97:d1:f0:57:18:f3:e7:a9:
         71:f4:50:5b:81:7e:59:f3:2e:91:12:2b:29:78:4d:01:43:18:
         cd:d2:c9:93:8e:74:29:ae:1a:24:ba:65:41:92:6b:8a:c2:da:
         43:62:05:9e:a4:46:de:a2:ff:8b:51:1b:88:48:6b:33:fd:07:
         70:af:cb:a9:8d:68:e3:ef:72:b2:d2:10:f3:71:6f:5c:6d:1b:
         1d:ce:14:c0:3b:3f:46:4f:46:d3:34:e6:53:fe:e4:01:ad:37:
         7e:ea:da:af:7a:ef:ea:32:59:14:bb:0b:91:9a:e8:11:11:c0:
         b1:b2:16:dd:ad:f2:47:5e:fa:e0:dd:48:98:4b:ee:96:47:62:
         28:2f:12:14:11:1c:b9:a6:c1:88:0f:b2:6c:7d:f1:b4:d2:68:
         02:6a:cf:02:6b:65:7b:54:67:08:c5:39:3c:83:02:f0:e3:f5:
         92:c1:67:f4:48:74:f3:4f:5c:0a:2c:10:92:a6:05:07:4d:ad:
         9f:6d:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:35:40 2025 by rpki-client