Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
File:                     d6789155-86b1-3972-a062-f4fb620bc8a4.roa (raw, json)
Hash identifier:          0wezQzszGfikpXHgGww+9NMTySBZeCU+FYi5VtkYzr0=
Subject key identifier:   78:6D:07:39:EE:0A:B7:0D:5C:BC:24:11:CB:FB:AA:1E:DA:07:71:92
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF521333A0B5C6C552733E800
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:33:3a:0b:5c:6c:55:27:33:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2de1de4b-aba1-4897-afc5-c1f4337c4567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:3e:c9:7c:8c:cb:fd:b4:b3:07:a4:18:52:
                    bf:41:97:ce:9b:cf:03:22:42:c6:af:54:fb:b3:92:
                    32:2b:fb:fc:53:d6:3e:85:a7:7c:93:a9:8d:66:47:
                    69:d2:71:56:e8:4c:cb:6b:78:d0:ca:79:02:30:75:
                    64:66:55:af:61:41:cd:f5:38:24:49:6c:0f:1e:d1:
                    76:a9:a0:d3:06:87:92:13:23:30:54:ab:94:34:65:
                    6a:5c:ea:c7:99:2d:05:bb:65:c7:01:4c:31:7d:e1:
                    32:72:8b:76:23:62:44:85:a2:9b:36:ee:76:e7:07:
                    5f:8a:74:b3:99:6f:8c:d3:7b:85:a0:da:0d:ae:17:
                    91:bb:20:fa:ec:85:85:c7:85:fb:71:39:d0:f4:11:
                    06:db:f9:57:18:2f:f3:cb:e1:f1:d7:cb:9e:d8:6d:
                    a0:c0:43:98:c2:76:cf:88:f8:c7:2e:1a:57:70:7f:
                    e9:18:99:f5:28:07:aa:b5:0f:f4:79:a6:56:24:6b:
                    bb:91:3c:6e:4c:f1:6c:a0:9c:29:a7:8e:b2:a1:c7:
                    0e:e1:0b:8b:cf:12:99:35:9e:17:6e:57:cb:08:2c:
                    8b:2c:f1:b3:a9:b9:fb:48:78:2f:af:33:1d:f6:3e:
                    ce:05:53:02:be:1e:76:fe:0b:9e:b1:90:13:c6:7f:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:07:39:EE:0A:B7:0D:5C:BC:24:11:CB:FB:AA:1E:DA:07:71:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:35:60:fc:2b:4c:6d:a4:05:c4:f6:92:58:d1:33:ec:ac:
         9a:fd:ae:9a:17:26:15:12:10:15:2b:d6:d1:6a:62:6e:f6:0b:
         af:10:cf:d9:d5:37:5b:92:4f:bf:47:88:5a:f0:1c:35:72:3f:
         21:cb:91:7d:52:e7:0f:82:4f:46:1c:54:1f:2b:68:e9:9c:21:
         9f:d4:39:fc:27:cf:77:08:74:c1:95:83:29:28:64:e9:fb:9a:
         5e:13:2c:83:68:aa:a7:6c:6f:19:a8:65:d8:be:67:59:e9:46:
         ed:28:48:37:80:07:df:ee:aa:00:78:1a:2c:73:4e:61:2d:a3:
         5b:0f:12:02:7d:e4:fb:9e:22:89:a7:3a:9b:7e:6c:3e:99:dc:
         d9:e0:fe:75:30:21:d1:df:68:58:8d:75:0e:2b:31:dd:bf:75:
         0b:77:8c:a8:ac:c3:f0:33:6b:38:46:3a:0c:61:58:38:50:34:
         27:03:26:4a:29:8e:38:7f:cf:f2:5d:77:5e:54:03:16:dc:ad:
         06:c8:55:c7:da:9f:54:2c:97:cd:d7:3d:8e:51:c6:00:d7:ff:
         4d:50:62:4d:40:b3:e8:4f:a6:69:8d:e1:f2:18:92:47:1f:44:
         ed:54:86:50:cb:68:6e:89:4a:df:57:bd:fe:44:7f:cf:e6:a5:
         b7:c0:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:36 2025 by rpki-client