Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
File:                     b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa (raw, json)
Hash identifier:          dBnJJpDZaiBZjolvY7slr58cFcsvd4eq5hHz0IPG5UY=
Subject key identifier:   52:0D:23:76:B5:F7:97:CD:1A:83:AD:ED:7F:C0:42:44:F5:01:52:3E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF5213362B01590B3A0A5BDC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:33:62:b0:15:90:b3:a0:a5:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=bd9101b6-7861-4f01-aca7-1f74ee156a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:9d:1b:7a:fd:71:b9:5b:bf:63:d3:f4:70:
                    8e:e8:d7:8d:30:15:ed:ed:89:89:23:3c:91:99:3c:
                    2a:70:b9:79:38:cd:6c:74:37:04:31:4d:3a:b4:99:
                    66:c3:a6:98:00:85:19:3f:d0:9b:cb:25:62:a5:1e:
                    33:58:1a:f4:e0:d8:cc:2d:b7:0f:52:15:d6:8b:1e:
                    21:c4:79:09:8d:d3:16:bf:f1:31:23:da:d0:e1:86:
                    df:ae:0d:ba:1c:22:0b:16:2d:a1:7e:87:9f:78:0c:
                    13:68:54:43:de:50:e8:32:84:24:86:a3:f8:31:d9:
                    b0:af:16:ef:15:3e:fe:e1:32:c9:de:ce:21:62:00:
                    8a:aa:22:a8:e8:1d:38:49:03:5b:1a:51:32:ac:d5:
                    cd:eb:f8:36:6f:3a:c1:00:06:54:30:26:f1:88:4c:
                    d5:08:70:24:5d:6d:1a:41:44:18:d3:e5:3f:6d:e8:
                    ce:9c:cd:4c:88:ca:7e:59:16:74:3f:8d:59:b6:c1:
                    76:05:25:75:40:67:01:64:99:02:59:9a:69:6d:f5:
                    01:22:4f:ee:61:96:cd:eb:2b:76:6b:07:ea:d9:9a:
                    d9:ca:3e:73:97:8d:c0:1c:b8:8d:00:95:0b:9a:94:
                    83:ca:48:f7:b9:b6:1a:fd:65:4e:6c:37:45:68:70:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:23:76:B5:F7:97:CD:1A:83:AD:ED:7F:C0:42:44:F5:01:52:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b5204249-b1ba-32d1-adc9-d93b3c949ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:5e:b2:9d:e2:4a:39:3a:ff:91:34:3f:7b:53:ac:56:a2:
         39:b1:b7:80:2c:26:ff:42:e9:76:dd:89:c4:4a:27:f5:69:30:
         f9:ad:1c:39:a8:fa:e9:5f:44:70:30:18:3a:d2:6d:65:f5:a5:
         06:c7:3a:08:da:13:b9:6c:f9:13:70:e6:d6:24:d5:75:82:6e:
         46:d0:db:04:7d:df:2a:33:93:6b:af:10:80:c0:9a:25:d3:e9:
         f0:4e:52:d0:6f:23:0e:1d:c4:4e:05:cf:55:40:8f:62:28:d7:
         b3:97:a0:5b:b8:97:0c:2d:75:41:f1:f5:3b:dd:6e:08:af:56:
         11:04:dc:c0:84:66:7b:25:57:de:de:20:0f:b3:22:4f:1f:97:
         b8:17:52:bc:b9:d5:93:1b:f6:7b:81:a6:fa:a0:2b:7b:cc:d9:
         09:dc:d0:d7:6c:0c:7f:9b:33:3a:8e:58:64:73:a7:83:cc:b1:
         c3:62:58:05:34:70:9c:d1:9f:4d:aa:21:ae:87:e6:5a:c3:16:
         1a:d5:36:5d:ea:b3:45:44:ff:36:23:e3:1a:96:e6:70:cd:b8:
         6d:e0:29:c6:37:63:31:25:56:e8:3c:f6:7c:b9:76:74:cd:a6:
         06:06:fd:ce:d3:88:e7:20:bf:96:d1:56:1c:3e:4f:b0:27:fb:
         75:c3:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:25:30 2025 by rpki-client