Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa
File:                     8f7749dd-4c2b-3c88-ab72-572a624fd536.roa (raw, json)
Hash identifier:          dFkJ3C1NqcWn4xyFcdxUaHPBmhpiXYpHePkdFN6BzVs=
Subject key identifier:   86:20:16:2A:01:A8:54:93:63:E0:EE:0A:EF:EF:9A:7C:CA:D2:00:9E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF52133C2A6ED2DB3A40DE300
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:33:c2:a6:ed:2d:b3:a4:0d:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2af6e101-487c-4256-b33b-a4395808793c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:f2:70:b1:9f:7d:93:31:85:39:3b:32:41:
                    6f:a8:9a:3d:21:13:75:a5:eb:35:20:98:ef:eb:64:
                    d6:e5:d9:32:59:9c:a9:45:b3:3a:03:de:47:a4:e9:
                    f4:85:bc:e0:71:61:f6:cc:bc:b5:5f:48:cf:78:18:
                    9f:c1:33:7c:c5:de:0e:ed:5b:a4:2f:bb:81:7f:2e:
                    5d:f7:44:53:5b:a1:a0:84:93:89:20:90:b7:7f:21:
                    f7:38:44:21:bb:db:b4:3d:86:00:8b:af:37:2d:61:
                    49:6c:ab:4c:91:e5:47:43:19:61:c2:04:22:5b:27:
                    51:1a:e3:33:47:d4:63:d6:41:d8:24:49:d8:32:c5:
                    2e:4d:93:ca:ea:55:54:fe:bb:da:c3:7d:28:28:e3:
                    90:8c:18:7b:0f:5a:d5:58:10:33:4e:8d:55:75:13:
                    8a:94:00:0c:9e:35:56:45:4f:ee:6e:3f:7b:84:0a:
                    b0:5e:2d:13:e9:09:60:8c:2f:95:7d:a3:61:d6:5b:
                    7c:12:1b:d7:b5:aa:74:71:15:c5:1a:99:9a:56:5b:
                    64:b9:e8:28:05:4a:b2:70:3b:cd:ef:20:39:1b:bb:
                    71:95:eb:69:65:f8:58:bf:77:bf:98:81:f7:5c:72:
                    40:d9:ce:b5:ca:43:63:1f:66:ae:3f:6d:4a:cb:53:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:16:2A:01:A8:54:93:63:E0:EE:0A:EF:EF:9A:7C:CA:D2:00:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/8f7749dd-4c2b-3c88-ab72-572a624fd536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:e9:01:71:96:c7:a5:4e:b2:42:05:ac:5f:18:ca:c3:b4:
         c2:c7:03:e6:fb:cd:ed:76:7d:93:08:ab:62:ed:e4:72:26:16:
         72:44:7d:9b:a5:ce:bc:e8:33:62:5d:45:9d:c3:a9:4a:51:6b:
         13:51:4e:a1:12:1a:7b:2c:f2:ea:f4:5a:69:dd:dc:cd:64:98:
         52:c7:9c:36:d9:d6:60:72:cf:79:58:93:c5:31:5d:a9:5e:cc:
         f8:9c:41:df:16:9f:a2:65:30:e0:aa:e0:49:b6:88:75:6e:91:
         17:04:03:3d:4f:7c:6c:83:1f:ab:d7:16:cd:be:cd:67:20:2b:
         33:90:cc:15:ce:0a:8d:ac:e7:f2:32:e5:1f:b9:12:e4:ce:2c:
         fc:3c:de:b8:6e:ce:9f:20:1a:7d:37:e3:e8:6e:c3:af:80:a7:
         57:bf:d5:02:4f:12:64:f2:84:51:7a:5e:d1:ee:68:22:46:cc:
         39:45:e0:c0:b8:07:84:80:4c:db:31:a8:95:26:0e:d6:b0:81:
         3d:52:56:20:d7:af:3d:ee:22:21:be:86:06:57:e5:47:b5:82:
         15:2a:5c:0f:e3:ed:13:b1:75:7e:60:dd:7d:1c:b7:a2:68:eb:
         40:e6:b0:68:10:d3:92:b8:de:e8:ad:12:5b:36:fb:c9:32:02:
         ca:8e:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:43:03 2025 by rpki-client