Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
File:                     13d3d209-306d-30fb-b006-0cf3524201ad.roa (raw, json)
Hash identifier:          0ixk7VvByYvCgu/D5EA6BsGvx+Bk3PA2DXrdBXFbvf4=
Subject key identifier:   54:F1:D1:7D:05:AD:B2:47:80:E9:68:A6:19:E9:94:86:56:B2:BD:89
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF52133D8DFEF606B01E61E40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:33:d8:df:ef:60:6b:01:e6:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=8af58bf9-3cd2-406c-8d33-016710211751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:8a:c0:d7:f6:a4:e5:60:19:2a:49:f1:44:
                    5d:ec:56:62:49:5f:10:3d:63:58:6e:77:92:0c:9c:
                    a8:b4:b7:8d:bc:67:8b:89:17:ba:8a:7b:9f:62:d1:
                    b9:cd:18:ee:47:cc:10:be:6a:62:0d:47:02:c9:25:
                    af:fa:ce:70:d9:8e:43:e6:3f:25:f6:91:ae:2f:f4:
                    89:1b:82:91:50:ec:27:c7:1c:92:9e:df:d4:de:32:
                    88:39:52:cc:f9:a3:dc:8d:c2:7a:d6:36:37:92:25:
                    29:30:81:16:53:bb:2d:4d:46:dd:5f:0f:e6:8d:96:
                    04:4b:f9:8c:c2:05:ae:7e:8e:6b:47:31:9d:27:2f:
                    2a:1c:3c:6e:dd:ee:a1:ba:7c:80:30:d3:c8:58:9b:
                    df:0e:02:1c:c2:38:c2:60:01:0b:e3:9b:60:13:cd:
                    59:e8:f3:41:8d:44:55:3b:89:85:a4:ca:32:e5:be:
                    4e:93:02:99:61:95:83:4f:27:7c:9c:eb:12:a1:8e:
                    7f:b8:e4:c6:a7:82:1c:b7:c6:5f:28:d3:a1:d5:01:
                    fc:64:5c:5f:16:45:d5:1f:57:70:99:af:9a:f8:eb:
                    df:d1:a7:09:fa:7a:cd:4a:b1:78:7a:35:33:51:e2:
                    68:02:5b:62:d4:f6:0a:78:d7:6c:62:25:19:d1:db:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:D1:7D:05:AD:B2:47:80:E9:68:A6:19:E9:94:86:56:B2:BD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:48:7e:a1:1b:99:40:73:8e:34:37:c2:35:b2:ae:2c:69:
         27:36:97:88:e6:70:8c:36:a7:73:5a:c4:c0:aa:49:92:e0:70:
         ac:e2:c4:10:d6:09:34:77:4f:32:ca:a1:b1:71:a3:d4:da:63:
         17:80:dd:89:33:46:c4:42:68:e4:c6:61:09:38:fa:02:f2:c9:
         3f:71:c9:9f:db:d7:75:c2:90:15:46:db:2a:0f:a3:85:cd:a2:
         2b:20:f5:76:fb:26:df:1f:21:87:59:08:fb:2e:bc:c2:25:07:
         dd:12:4e:ee:3c:56:1f:1a:95:bd:c1:69:4a:bc:cf:53:35:4a:
         f8:e4:2e:a4:74:2d:6f:89:11:5a:4a:89:97:20:dd:a3:a1:1c:
         a3:43:ad:57:5b:4e:40:7d:0c:c7:f5:da:22:0a:8b:ab:e4:68:
         e5:b5:1c:46:a0:ac:64:95:48:7e:02:30:1d:bb:eb:04:a4:31:
         67:8f:b6:1a:2d:80:8a:b9:4f:48:3c:0f:6f:42:67:6c:8a:b0:
         47:26:bc:3d:5c:ea:de:16:4c:78:b1:4c:ca:28:43:08:a3:02:
         94:9d:fb:47:21:fd:2a:2c:fa:6f:d2:0f:a0:6a:b7:e2:05:b3:
         b8:67:62:eb:8c:c3:c8:99:5a:1d:88:bd:fb:d2:33:5a:a2:7e:
         af:a4:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:37 2025 by rpki-client