Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
File:                     f5e65c7c-0298-34e7-8190-79fa24c0e960.roa (raw, json)
Hash identifier:          N2TkszCMMAisOUKQDyNfSuWcCJ0DKwnQMRT9K9FVfkE=
Subject key identifier:   85:A6:9D:A0:41:4E:6E:38:88:57:B8:C9:32:A1:64:68:E6:3E:1F:32
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF52131D91C25FE2FBFC09E00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:d9:1c:25:fe:2f:bf:c0:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=68154f86-d99d-4768-bf24-a18361a088f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:75:49:33:69:8a:43:7e:70:21:96:ae:4c:
                    7b:8f:c9:a9:62:ae:ab:be:5b:cf:9f:be:dd:c8:da:
                    32:15:75:e4:a0:1f:02:53:07:38:36:c0:82:12:c2:
                    2f:65:3f:20:19:6c:3a:8c:1b:b2:17:be:00:a4:3f:
                    b9:b1:48:c3:5e:76:5b:b0:9c:1c:8e:bc:a1:45:a7:
                    62:6f:4d:5a:9d:f5:e3:f1:3a:3b:a7:18:04:b9:22:
                    2d:3d:d4:9d:63:b6:1c:aa:34:ee:63:ed:89:37:99:
                    15:81:fd:4e:18:b4:df:3e:6e:f5:32:ec:e0:b6:5e:
                    72:bf:05:09:78:b1:17:69:54:08:e9:53:a5:69:e8:
                    22:95:74:44:fa:cd:e0:a2:ba:12:5a:26:83:d7:71:
                    76:19:d1:da:7e:2c:fc:3d:59:8b:a4:a7:c4:73:8e:
                    c7:cb:ff:e9:b4:dc:1e:dc:db:28:03:58:65:e3:85:
                    11:1f:d2:e3:c7:7b:14:7e:ab:28:0a:8a:74:d2:7c:
                    94:cb:a9:af:e3:83:7c:37:8e:d0:f3:b2:07:9f:0f:
                    c8:8a:e4:b2:e1:8e:89:c4:b6:4f:90:1b:38:78:92:
                    b2:1d:0d:28:42:1e:62:76:fb:23:ff:95:eb:28:f1:
                    f1:b3:b8:aa:97:7d:c1:58:4d:f8:a9:e5:b9:81:e8:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:9D:A0:41:4E:6E:38:88:57:B8:C9:32:A1:64:68:E6:3E:1F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:4e:0d:1a:44:60:62:f7:d4:74:86:e6:39:be:76:36:cf:
         5b:9e:a9:53:1a:4a:af:18:ca:17:8a:3b:f1:18:dc:c4:a7:71:
         e8:e2:e7:e0:cd:f6:39:8b:72:50:95:2d:56:90:37:30:a9:e5:
         14:60:93:b5:42:ca:8e:39:8c:26:85:d9:cf:75:37:99:b1:b8:
         c0:eb:ac:07:97:4a:2e:f8:19:2c:b3:3b:42:f6:9f:0c:69:5c:
         09:85:f5:50:c8:ec:d0:cf:39:35:95:c4:bb:6f:2b:e5:d3:32:
         a3:f3:38:93:eb:5a:e0:ff:eb:37:a0:e1:01:ee:bc:a8:c4:08:
         d7:63:e1:38:7d:ed:e3:6b:77:a3:c8:f5:82:52:a0:fd:a2:d3:
         ca:34:47:ce:8e:4e:f2:65:70:bc:aa:cc:04:c2:68:c8:33:80:
         96:82:fb:aa:2f:98:6e:b7:e7:2d:21:80:05:bb:fa:2a:44:34:
         e0:9e:a0:a6:bf:27:3f:68:55:11:31:c1:fa:cd:92:c3:1b:46:
         46:b5:63:55:bb:f6:88:fc:5d:71:67:3c:4d:06:48:98:03:37:
         6a:1d:6e:c9:b3:89:0e:b9:97:1a:1d:08:12:af:9b:8c:f6:b8:
         87:c1:ff:99:7c:6f:57:d8:b1:bf:ce:44:28:33:0c:db:60:c6:
         6d:d6:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:48 2025 by rpki-client