Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82dd2582-090c-3c85-b49c-9798389ab8ba.roa
File:                     82dd2582-090c-3c85-b49c-9798389ab8ba.roa (raw, json)
Hash identifier:          0iXvl2kCErnzhy8jVrNQRClRpPTG0NT2frcceQxRRTw=
Subject key identifier:   F1:87:89:72:1A:1E:B2:9E:2A:11:43:C6:3B:57:5D:3E:96:22:26:AD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3B61BBEFD36DD1A2A480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82dd2582-090c-3c85-b49c-9798389ab8ba.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2001:56b:3f10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3b:61:bb:ef:d3:6d:d1:a2:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=f53a8f11-2722-40aa-a6e8-201d4c23cce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:d3:7e:a4:3c:3b:a7:0c:12:37:69:c4:97:
                    a2:6c:b5:da:46:39:23:2a:22:11:f5:73:ca:49:cb:
                    b7:dc:2c:1a:b3:a0:84:6e:1c:ec:e6:df:b9:41:11:
                    d1:6a:4c:63:cd:fc:49:8c:73:d6:c4:83:d1:de:91:
                    72:86:08:c2:83:92:3a:08:b0:96:a5:d6:17:a4:f9:
                    ad:65:9c:62:63:ca:e2:3b:2e:7f:b5:42:6d:49:b9:
                    2d:65:ae:99:bc:5b:cc:e3:04:54:4c:39:ac:f1:4c:
                    e0:95:ec:89:e5:74:35:ae:c7:a0:eb:a2:90:47:1f:
                    8f:20:da:13:cb:2a:cd:58:7e:cd:10:67:3e:2a:fd:
                    e1:41:f9:b3:3e:6d:3c:7b:5c:71:12:cb:b1:02:71:
                    85:61:a2:24:bd:32:56:08:30:a2:af:f8:fc:6b:d4:
                    b3:9d:5a:d7:3a:b6:34:56:cb:9b:9a:4f:d4:f5:79:
                    d2:36:96:ce:9f:6d:55:05:0b:75:bd:3e:af:44:a4:
                    86:01:64:e7:76:92:00:69:f6:6b:6b:2c:9f:e3:d6:
                    72:0b:0c:09:25:05:20:b0:85:02:5b:52:d2:65:c0:
                    83:01:b9:55:df:3e:f1:c7:2c:b6:ad:67:3a:54:64:
                    be:50:1d:67:5d:31:0e:83:80:a4:fe:29:c1:b4:5e:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:89:72:1A:1E:B2:9E:2A:11:43:C6:3B:57:5D:3E:96:22:26:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/82dd2582-090c-3c85-b49c-9798389ab8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:76:a5:cb:7e:81:a6:ba:e2:a6:a5:00:7e:9e:2c:fc:23:3f:
         e5:a8:df:69:77:bd:9d:bc:7c:a3:98:a6:2c:91:a3:cd:fd:8d:
         ff:3e:ac:1d:34:27:98:62:4a:1b:0e:68:d5:98:0b:af:9d:42:
         70:c3:50:f4:d3:a1:ee:8c:8f:2c:2a:9c:2e:a2:d0:59:62:35:
         cd:1f:22:f2:bc:b6:5c:35:e3:1b:b8:3d:61:0e:b1:eb:65:d6:
         2d:b3:f6:38:16:ac:25:3f:a7:1f:ab:7c:4f:d4:44:d9:6c:b9:
         d9:6c:e2:8e:24:62:f1:57:45:f8:4e:ba:7b:39:ec:06:2b:3f:
         df:1e:fc:5d:59:4d:94:14:11:e3:98:29:c8:a2:0c:ba:2d:7f:
         8a:3c:f5:40:61:7a:bd:95:d6:09:a9:51:bf:d9:41:52:8f:85:
         59:76:a9:7f:56:6b:a4:d2:4b:9f:73:4e:8d:e9:d8:00:78:d8:
         2f:0e:b7:be:54:9b:20:41:e5:f3:5e:d3:61:3c:c2:e4:f7:78:
         a8:2d:2f:a9:cb:f8:87:5b:6f:81:93:33:cf:ea:e7:52:0d:3a:
         5b:c5:63:e8:0a:5a:10:b8:16:44:de:11:84:31:80:ce:6d:20:
         d4:99:d5:6a:ae:f8:e1:8c:d5:27:10:4e:8b:8c:1f:92:6b:87:
         21:c5:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:50 2025 by rpki-client