Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa
File:                     a9102b45-5600-3fb3-be81-4b0ef613577c.roa (raw, json)
Hash identifier:          l39YeHF21Oeq9uovlYH6E6SK1devNvwNgkaQMts/inY=
Subject key identifier:   47:3F:C6:E4:30:91:4B:12:0A:90:00:5A:ED:5F:C6:44:0B:66:62:22
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F4328584A43DB08C76A82910F57998D80
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     16787
IP address blocks:        2605:1c00:50f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:08:c7:6a:82:91:0f:57:99:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2476685d-f252-417c-8729-e1f521386079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:29:03:71:f0:f5:11:56:bb:27:79:a0:88:
                    12:fc:c0:f9:85:f5:8d:3d:bd:8a:91:97:35:d4:38:
                    99:f9:6d:2e:e0:96:30:7b:0a:ff:93:28:a7:7a:8a:
                    72:0b:59:e7:0c:8e:ed:a4:e3:5e:cd:0a:83:29:67:
                    ff:32:79:cc:a9:88:8a:06:3e:ae:77:b8:ca:98:78:
                    f4:79:7b:f9:2f:0a:54:1a:78:fd:29:b7:92:98:7c:
                    e7:47:1c:41:e3:34:b2:55:aa:65:22:ab:9c:af:72:
                    78:27:16:3e:f7:6b:3c:99:60:78:81:94:7f:dd:0f:
                    d5:51:84:c3:6e:ce:10:59:79:e3:d3:7f:f8:61:1c:
                    58:6a:59:16:da:dc:4c:4f:7e:39:47:bd:57:83:2b:
                    e8:7c:be:26:04:33:c8:65:cf:68:b3:05:85:35:2a:
                    de:eb:8a:81:40:22:fe:fd:c9:1a:7c:c6:7d:fb:7f:
                    8a:7c:82:70:78:a7:18:75:c3:27:27:ec:85:eb:76:
                    9b:72:5d:01:a1:76:84:fa:96:9e:5b:95:ea:70:a0:
                    85:21:89:4a:9b:e4:86:89:93:4b:93:c4:9f:37:e1:
                    2d:95:4f:8e:fd:1a:06:e0:5d:2b:76:26:cb:fe:3e:
                    74:1e:35:57:59:f3:e5:76:01:88:8b:dd:28:e0:57:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:C6:E4:30:91:4B:12:0A:90:00:5A:ED:5F:C6:44:0B:66:62:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a9102b45-5600-3fb3-be81-4b0ef613577c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:50f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:ca:f5:91:ff:c7:01:ac:a9:72:57:a5:d7:a9:bc:11:72:
         d4:c3:3d:5c:58:34:90:56:3f:77:ad:a5:e0:36:ae:5e:fb:10:
         f8:cb:53:a1:93:17:7a:35:ae:3b:8d:dc:10:77:f9:cd:7a:e4:
         7a:b2:d0:16:c8:48:cb:4e:9b:60:5c:73:b7:c8:f5:d3:04:17:
         eb:fe:87:a0:4a:ef:87:06:cd:c6:07:3f:b5:9c:a3:1a:5d:49:
         6a:45:1b:2e:ae:6d:ea:49:ef:26:7d:84:26:b1:ca:17:f7:e1:
         73:ef:45:cd:a2:f2:23:2b:2a:36:93:55:e2:f9:e3:b3:d0:7e:
         d6:57:d4:93:f3:4d:84:a2:1d:3e:c5:f3:25:d2:84:bb:91:e6:
         be:57:01:75:97:fe:b7:5d:ed:42:c9:3e:e4:11:52:8d:98:90:
         d6:cd:fe:9a:0c:9f:fa:19:23:6d:f6:b5:1f:6c:78:8c:e7:8c:
         61:9f:7d:6f:b7:e9:61:42:15:75:33:50:3b:9a:0f:10:c6:d2:
         90:7e:31:ec:48:ee:34:82:9a:8d:79:60:c6:09:a6:34:d6:c4:
         53:cd:69:b4:d5:e7:93:25:87:f4:de:8e:3d:41:93:32:ab:55:
         92:bc:ae:1e:52:b8:08:c5:75:20:2f:76:1d:01:a5:70:eb:5c:
         52:db:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:21:36 2025 by rpki-client