Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa
File:                     50c6deee-a638-3c24-a004-7bb723f2e681.roa (raw, json)
Hash identifier:          oLFwNsPcgwNrpGwuFx0gbdjVsF1wxalOCq9fQXjtrc0=
Subject key identifier:   5C:40:92:38:FA:36:84:AB:81:8D:3C:B4:F3:EB:41:14:60:BA:E3:9B
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF5212FFAFD9098816B691CC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2f:fa:fd:90:98:81:6b:69:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=5e81488a-160c-4432-9277-2b4b924c1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:34:8c:4b:3a:d5:20:c7:03:16:2c:27:c3:
                    02:46:f4:ca:59:88:ea:0e:57:b4:73:d4:da:b8:39:
                    cf:53:85:a3:dc:61:06:2e:df:44:8e:3d:ef:38:00:
                    38:b2:99:15:e7:bc:27:ab:88:7e:ed:ba:b2:de:f4:
                    db:0d:69:19:57:ba:38:f0:7b:11:c9:0f:f0:0d:af:
                    18:15:92:e3:1d:e3:74:23:b4:6b:35:f1:58:90:70:
                    5a:ce:68:33:bf:fb:db:e3:0f:12:6e:fb:8e:a7:3e:
                    95:5c:9b:b6:73:98:c4:d2:81:a0:3b:01:47:bc:fa:
                    a5:98:8a:59:20:37:e4:44:b5:02:88:0f:39:b2:7d:
                    e1:0c:11:36:e9:bb:f4:3d:1c:a6:e7:e9:57:69:39:
                    39:37:f8:3f:55:fd:ef:b7:96:8b:f1:4c:da:5d:e7:
                    94:79:01:99:96:1a:8c:a1:fb:4e:92:06:8d:f1:dd:
                    fe:cc:47:07:32:20:2a:b8:f9:3e:be:e8:95:a7:c1:
                    42:c2:8f:8e:fc:0c:3b:9b:c3:44:5c:8a:b6:6a:be:
                    b3:49:2d:b0:42:6f:66:5a:0a:c7:4b:91:70:62:c8:
                    72:c0:18:48:b9:61:9c:8a:ed:68:bf:73:c6:92:52:
                    85:47:ca:36:4e:ae:d4:f3:30:71:2d:fa:c6:85:f0:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:92:38:FA:36:84:AB:81:8D:3C:B4:F3:EB:41:14:60:BA:E3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/50c6deee-a638-3c24-a004-7bb723f2e681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:1e:5d:6b:80:fd:1f:e5:99:17:0a:11:e7:4e:9e:95:1e:
         40:97:5d:6b:36:af:72:c7:c8:27:e5:9d:9f:46:81:02:70:56:
         35:b2:ee:32:28:2b:9e:ff:5c:ac:42:89:81:32:1c:bd:79:8f:
         f1:5f:97:00:9d:40:36:5f:7d:bf:92:a2:a8:83:74:c9:e7:47:
         d2:0d:9c:1c:d4:bb:85:c6:c3:98:b4:4a:20:19:34:45:c8:40:
         06:32:84:a1:60:5e:b2:c0:30:bd:84:62:4d:a5:6a:7f:16:d4:
         f9:61:ef:a4:cb:af:d9:d3:eb:e2:5e:fd:eb:a9:bf:4e:ec:84:
         8a:32:69:1e:87:57:10:cd:2f:75:5e:2c:66:15:d9:39:4c:9f:
         25:c7:27:5e:75:ac:7c:a4:cc:3a:84:28:7f:b4:9b:0f:34:34:
         ed:6c:40:a2:cc:43:2a:7c:00:d6:90:6c:0c:0a:9b:f1:77:bc:
         46:4c:75:54:e8:65:47:1a:99:21:0f:9a:fd:6a:46:27:b7:e8:
         47:d8:7d:87:a5:d4:8c:eb:7d:36:c6:dc:93:fc:d2:0b:c7:68:
         54:0d:70:ac:d9:4b:60:bb:2a:70:f1:35:05:ff:2a:d1:a8:46:
         33:f6:d3:bc:94:30:94:9e:5f:85:24:e0:05:ba:53:74:c4:0c:
         a9:15:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:46 2025 by rpki-client