Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa
File:                     c6809bf1-e017-3206-926e-3237e29986f7.roa (raw, json)
Hash identifier:          Xh6YGggC3THNKw5GwXsch/cMUQye1NPh95F4l/9levs=
Subject key identifier:   0D:59:50:20:70:73:FB:E6:32:54:AB:59:55:63:01:AB:09:66:6C:6E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F2F819E079A6B1397900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        2001:56a:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f2:f8:19:e0:79:a6:b1:39:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=648991a3-0aae-451a-bbe6-0d6892774777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:cb:62:06:f1:8f:28:20:fc:f8:07:69:71:
                    5d:7a:cd:be:17:1a:bb:87:b1:58:2a:50:3e:53:f9:
                    27:4f:71:2f:57:43:d3:9d:7f:f3:37:60:3c:c7:c9:
                    35:a3:bf:f8:a6:16:29:9a:85:3d:9c:fa:cb:a6:13:
                    1d:03:30:ec:cc:92:24:52:17:ec:d7:f3:d4:79:fe:
                    d7:1b:4b:93:ac:e8:1b:8e:17:1a:be:78:6b:d0:0e:
                    2b:c0:c2:48:1b:8a:ea:00:e6:d3:3e:0b:8e:09:64:
                    3a:34:fb:8a:a4:80:d5:68:c5:87:32:c8:78:17:4e:
                    2a:cc:52:60:c3:f3:b4:6f:49:a7:26:e3:45:53:e7:
                    bc:04:31:b0:91:ac:69:74:bf:44:a3:d9:c6:2c:d0:
                    83:c7:42:ff:a4:f1:ba:90:77:cd:fa:98:22:85:58:
                    dd:d7:de:4a:c2:38:3b:d7:08:67:1a:85:b3:f6:26:
                    cb:c6:7f:99:74:7b:a4:a7:94:99:a8:b8:4a:48:a2:
                    1c:be:12:67:12:e8:04:ba:2f:83:28:91:89:6f:90:
                    43:f0:2b:c4:ae:14:b1:a1:05:b0:86:ad:f1:12:23:
                    7d:b1:cf:9b:1b:a5:4c:35:d9:c8:56:aa:5e:45:86:
                    64:a2:18:7c:e2:83:04:37:00:72:1f:c1:94:6d:d1:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:59:50:20:70:73:FB:E6:32:54:AB:59:55:63:01:AB:09:66:6C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:77:95:ed:81:c9:b2:bc:40:d7:09:3c:f0:93:12:81:93:
         45:34:0f:19:f7:15:6b:48:a1:8d:82:35:3b:ba:d2:a8:e3:11:
         b8:6a:24:64:69:23:10:0e:63:4b:f3:1f:49:5b:37:6d:f0:d8:
         7e:b9:92:d0:9a:e4:fa:d8:8a:21:d5:25:9f:0e:56:39:ab:f7:
         4c:93:00:9d:cc:99:16:0d:81:88:ff:04:99:3c:df:01:ff:7b:
         3c:4d:bd:3f:d9:c0:18:92:b7:cd:de:1b:9b:4a:f6:07:3c:f5:
         a3:29:73:e6:90:2d:29:ac:11:f9:ad:39:8a:e3:25:95:da:b8:
         fb:68:a0:54:1a:40:1c:84:aa:7a:6d:51:68:36:a6:3e:1b:e8:
         57:af:c0:50:84:7b:1d:a1:5c:7a:de:97:b8:bf:b8:a2:8e:78:
         aa:80:67:f8:1a:26:db:9c:57:a8:56:51:c2:c2:b6:09:a8:dc:
         3d:a5:66:44:5f:bb:71:95:1a:49:aa:ff:cf:d1:9b:8f:aa:7f:
         48:05:6d:32:b7:8d:bf:a1:40:93:7e:28:71:7e:80:f7:39:1c:
         0c:f9:ad:60:25:f8:16:69:92:2e:e1:0c:d4:dd:c0:e5:ad:77:
         5d:de:3d:2d:95:bd:eb:0f:a8:0d:6a:d0:86:c4:43:cc:67:7d:
         9e:84:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:41:43 2025 by rpki-client