Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa
File:                     a5938fae-5b33-3c98-9a96-6b8adafefa63.roa (raw, json)
Hash identifier:          wgcccXhcizq5llOQS+fam1N0DX7gosgWjtZsHfmbOa4=
Subject key identifier:   E8:75:59:0E:C0:A2:24:00:E9:75:B3:DD:3E:B7:25:3D:16:E6:0E:8F
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584A66C06BEEEEB55D1648D2EF00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     11537
IP address blocks:        2001:468::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6b:ee:ee:b5:5d:16:48:d2:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=45a4e522-f1eb-4110-ae1e-8404711cc74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:5d:8b:ce:ad:fd:35:77:8d:de:2f:ac:f5:
                    94:c4:c6:af:80:10:0c:46:d5:8d:88:ec:2b:44:53:
                    f6:c2:54:2a:fb:f3:1b:6e:cf:e9:2e:73:4a:76:84:
                    dd:1a:08:41:b7:26:94:0b:9e:41:f5:66:33:f2:e5:
                    1b:28:53:9b:aa:0a:0d:95:f1:61:47:d0:a9:24:5f:
                    ae:b9:53:ed:19:2b:be:c0:45:12:9f:e3:a0:64:7d:
                    37:79:27:d6:ff:77:c4:69:ca:9b:04:d7:a8:5c:73:
                    1b:71:67:13:fb:bc:14:b9:f2:aa:31:45:cd:41:40:
                    22:48:f3:00:8b:ad:27:6a:9c:3a:bb:33:58:00:8a:
                    40:94:ee:a2:39:fc:8e:2f:72:b1:13:fd:cf:54:f7:
                    c3:28:6c:e1:6e:51:b3:0b:12:5f:c5:86:33:3a:88:
                    56:32:87:5e:15:a1:80:d6:7b:9c:59:6a:01:fe:a5:
                    a6:3d:d8:30:9e:5d:6f:22:1c:27:f5:18:10:6f:15:
                    1a:fc:f1:83:a9:0a:00:ed:5f:9c:7d:9f:53:16:2d:
                    e1:4a:3d:68:c7:d2:ca:00:9a:7b:32:54:59:88:19:
                    65:28:3e:a3:98:77:d8:08:fa:bf:39:f5:3c:b2:fa:
                    34:b0:80:52:c2:11:ec:1c:c1:8e:88:20:46:9a:f1:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:59:0E:C0:A2:24:00:E9:75:B3:DD:3E:B7:25:3D:16:E6:0E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:59:6a:fe:3d:6f:9c:9a:0b:d8:4a:ae:cd:bb:b0:f2:fc:
         14:2f:26:e3:55:e7:1c:31:e5:8f:cb:ef:3b:fc:83:c6:61:ec:
         eb:a0:fd:25:e7:d3:ca:00:82:17:c5:e2:9a:3a:bb:d5:ca:3e:
         75:c1:ac:2b:5b:bf:ec:41:cb:e7:4d:01:b3:8a:cb:17:bb:db:
         55:08:ff:75:96:26:ed:17:72:c1:f3:a2:35:93:bf:a0:6b:69:
         09:1f:4c:da:55:3e:52:15:90:bf:50:64:e7:71:8e:92:97:91:
         ee:68:24:97:aa:56:82:2a:78:08:35:58:e8:ac:46:aa:ec:fd:
         6f:6d:56:1c:89:a6:68:d9:3a:dd:7c:68:7b:85:1a:03:d5:4c:
         80:c8:3c:e4:01:ed:b5:8c:16:32:75:3f:db:fe:1a:89:fe:39:
         e7:d5:dd:5a:d4:97:78:cf:e5:6a:d9:67:6a:d6:fe:d8:9f:6e:
         0d:5a:67:83:4f:3a:fd:a2:63:1f:8e:3f:16:c4:a7:9e:ae:ee:
         53:b0:74:f1:f9:c8:1e:5b:2f:a2:44:ef:6e:36:74:9d:47:a8:
         a9:40:81:a3:30:5a:a9:4a:4a:89:93:cc:11:18:56:72:b9:31:
         46:59:80:04:44:23:e4:b8:c7:11:ce:d7:f0:87:86:69:a5:16:
         81:e6:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:51 2025 by rpki-client