Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/47233191-9743-3b30-b06c-a68f18ce9040.roa
File:                     47233191-9743-3b30-b06c-a68f18ce9040.roa (raw, json)
Hash identifier:          HhgjqN0su8ugJMzKfc8za1A2DSjiqJfw7k4hdHiiPIU=
Subject key identifier:   F0:D6:C6:96:E4:5B:F1:8B:FF:D2:E4:78:81:98:CC:25:3E:DD:BF:9A
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584B25FC326A12263109DBFD78C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/47233191-9743-3b30-b06c-a68f18ce9040.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1064::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:32:6a:12:26:31:09:db:fd:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=1ce6d715-0bd8-4b4d-ae09-f8b480f1bf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:51:71:45:06:5d:8d:b6:95:98:5d:22:b0:
                    34:35:2e:bf:ed:e0:be:7f:fe:b3:d9:d5:9d:6a:e8:
                    23:8d:70:e0:fb:e3:77:ee:55:f2:0c:bb:88:9b:96:
                    3d:38:c2:77:d2:64:8b:47:af:5a:5b:6d:14:a5:fe:
                    cd:f8:5f:e5:2a:2f:3c:b6:db:d1:cd:8e:88:4f:1a:
                    c2:51:eb:d9:ee:22:e9:92:35:41:84:03:83:dd:84:
                    34:62:89:83:2e:ae:3c:03:90:d3:f8:cf:db:68:3e:
                    9c:46:19:13:5e:ad:23:82:99:50:7e:72:c0:15:1c:
                    ce:26:57:a9:81:f7:06:9b:65:03:e8:93:69:16:ea:
                    d7:06:08:7c:79:b3:17:82:ae:0e:df:30:19:44:5d:
                    01:5e:31:a0:e0:e7:94:05:c3:ba:b1:11:89:32:47:
                    ac:6d:10:0e:96:23:96:ef:38:12:88:2f:03:78:65:
                    ab:f1:40:51:d2:a3:0f:ac:5b:b1:10:62:c8:c3:f5:
                    2a:a8:a3:b1:8b:12:51:0a:10:2c:15:36:0a:f9:28:
                    8e:70:0f:cf:14:06:48:9c:08:87:cd:cc:6b:1b:89:
                    6d:1b:9e:d6:93:37:3b:46:e5:98:a8:fe:25:9e:34:
                    f1:3d:30:6f:ee:f8:a6:c0:7c:7d:bf:ce:92:a5:ca:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D6:C6:96:E4:5B:F1:8B:FF:D2:E4:78:81:98:CC:25:3E:DD:BF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/47233191-9743-3b30-b06c-a68f18ce9040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1064::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:6d:10:f1:be:ab:f7:58:30:3e:f8:85:71:bb:6e:35:2c:
         28:37:b9:4e:07:0f:05:f5:9f:fa:e7:98:ae:b9:96:a3:c1:18:
         08:ac:37:1a:8d:37:f9:6a:49:56:a4:0c:91:37:65:53:32:2c:
         3d:e4:8f:42:a6:f2:6c:22:50:37:e5:f3:d3:78:06:9e:80:d4:
         9b:4a:e4:ba:92:2f:ee:e3:e1:01:80:2b:35:38:91:11:51:b7:
         e9:34:67:e7:20:81:74:5e:ad:36:6a:c3:50:55:54:cf:b1:6b:
         67:36:35:1f:c0:fe:79:fb:26:62:26:e6:be:50:57:c6:b3:f9:
         21:21:ff:37:95:34:82:a0:71:dd:40:b5:ad:e1:73:81:df:01:
         99:8c:2e:39:00:e9:7d:c1:52:c5:de:08:98:86:24:2d:25:38:
         00:0b:bf:78:e2:9f:b9:e6:5b:a3:e6:84:3a:3e:67:05:14:8d:
         4c:59:51:4d:0f:98:d3:dc:a2:50:b7:22:2a:cf:c9:3e:1e:1c:
         7c:a3:12:b9:62:0f:ff:82:a8:43:8c:f8:ba:ac:4b:3b:16:bc:
         2e:d9:55:0b:3e:56:82:67:98:b9:c3:28:28:fc:af:40:f7:66:
         72:9a:3f:01:dc:f5:29:07:c0:c4:f7:86:26:81:96:41:82:a2:
         d3:75:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:47 2025 by rpki-client