Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
File:                     1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json)
Hash identifier:          8xOstF0o8NMaisA1hv3JRSA0T7HmDI2mVFa3blHyeVw=
Subject key identifier:   81:9C:9E:B7:7E:27:CA:2E:2D:F2:C4:00:CB:44:B0:B3:E1:B8:B9:90
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A9A6635A177043E0710219480
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     61317
IP address blocks:        2604:4500:1200::/40 maxlen: 40
                          2604:4500:1300::/40 maxlen: 40
                          2604:4500:1400::/40 maxlen: 40
                          2604:4500:1500::/40 maxlen: 40
                          2604:4500:1600::/40 maxlen: 40
                          2604:4500:1700::/40 maxlen: 40
                          2604:4500:1800::/40 maxlen: 40
                          2604:4500:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:35:a1:77:04:3e:07:10:21:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=1d6c5458-1759-4851-8246-4a74bd541cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:9f:bc:77:72:50:83:d0:34:62:57:90:43:
                    df:92:d9:5b:92:ed:2d:fd:33:70:97:91:d3:ef:ce:
                    cc:7d:8a:94:40:aa:ca:e2:eb:b4:6e:a7:ab:98:77:
                    57:14:41:01:94:a4:13:35:32:98:b4:f2:7f:ce:b9:
                    c3:d4:36:76:88:e7:de:df:f7:8e:9e:bc:e1:dd:cc:
                    d6:86:78:67:59:6f:00:53:b1:e9:80:03:30:0e:a6:
                    19:80:05:6e:7e:e3:12:9d:d6:3f:da:e9:4a:24:9d:
                    7b:81:f7:3f:fb:6b:dc:3a:51:72:89:c2:c5:88:af:
                    ea:2b:fc:7c:96:c4:9d:66:f2:82:8f:da:1b:5f:67:
                    28:0b:f1:3f:75:26:a6:4a:e1:a4:c4:99:3f:1c:a3:
                    8b:da:e5:36:3c:09:8b:6b:ba:a1:47:5d:1d:73:7c:
                    ad:fb:2e:83:d6:0f:39:cd:6f:fa:fe:4b:ae:9e:c5:
                    95:3f:6e:4d:0e:44:d4:1b:77:8b:a8:3b:13:3b:06:
                    40:c0:fc:54:08:e6:d0:aa:24:a3:a8:9d:de:98:59:
                    0d:23:c0:b9:80:c4:c4:88:af:8e:fd:5d:5f:91:95:
                    8d:bb:bd:f2:8c:ac:7a:28:f9:64:c7:47:bb:a3:68:
                    09:c2:6a:08:2f:93:5a:0d:77:3c:2a:e7:55:96:0f:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:9E:B7:7E:27:CA:2E:2D:F2:C4:00:CB:44:B0:B3:E1:B8:B9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:90:ea:11:e1:6b:4d:c9:99:d6:15:4e:ff:11:0a:54:16:4c:
         28:a9:36:99:17:d2:25:16:ce:e3:27:fc:b5:aa:8f:6c:38:5f:
         7c:7d:e2:e7:10:16:48:03:4e:f3:3e:02:fe:e8:9e:bd:50:92:
         f1:be:4f:a4:20:48:bf:65:32:ef:29:b9:37:9a:a3:04:53:79:
         1c:41:5f:01:bb:45:0b:6f:24:91:5b:89:3c:17:f7:d1:7a:9c:
         e8:cb:5e:80:45:e8:24:14:81:92:70:f3:92:7f:5c:bc:a6:40:
         a0:12:4c:fd:11:88:6d:58:8a:13:23:42:03:a6:4e:13:0b:3e:
         aa:ad:f1:b9:ad:60:03:68:79:eb:95:1a:b0:f6:ed:8f:45:70:
         dd:1b:27:21:05:5b:35:fc:f5:4b:12:d5:75:c5:b1:99:c9:ed:
         f3:71:14:d1:e8:b8:c8:07:5d:f2:e5:c9:be:89:24:cf:86:1d:
         f1:4c:c5:30:f4:02:99:d3:72:5b:b4:db:5f:d2:43:a3:5b:54:
         27:49:53:4b:e0:50:3d:aa:fb:b6:5f:cf:7c:29:3c:ce:0a:2c:
         a5:ea:c9:2c:f3:a6:f4:d1:9e:34:21:e6:d8:2e:1a:ad:33:e7:
         8e:f7:70:ae:82:83:28:82:4e:3b:8e:8d:3c:9e:12:bb:14:6f:
         b5:06:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:59 2025 by rpki-client