Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa
File:                     e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa (raw, json)
Hash identifier:          5hfQVk5bNTMNWgDMD7To1acTs4nLvvI5OGIfqIvV3Pw=
Subject key identifier:   24:4C:F4:76:69:C7:88:EC:C1:0B:E2:58:06:82:EE:58:E1:97:57:3E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3BA3D7198C76DD62BB40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2001:56a:6fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3b:a3:d7:19:8c:76:dd:62:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=71f78276-7bc7-47c2-91b4-61e9fac29cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:9f:77:fa:83:8d:dc:b6:31:b8:b8:b8:55:
                    52:f5:68:fa:07:cc:cd:01:fe:29:a1:da:e3:aa:df:
                    34:45:ee:2e:d5:2f:c0:04:8c:62:4a:21:67:dd:79:
                    81:17:59:3f:2d:9d:4e:e1:0c:cc:95:b1:39:67:96:
                    bf:b8:ff:c6:dc:f6:d7:88:50:d9:ae:55:1a:50:d3:
                    6f:d1:f7:df:c5:ef:d4:2e:bc:99:d6:0d:d7:19:31:
                    07:23:10:23:3f:0a:64:71:02:83:d2:a8:da:50:97:
                    ff:32:bc:2c:f6:8f:93:db:e9:ec:5f:34:28:dc:8d:
                    49:6d:94:8b:d3:1e:dd:f4:a0:8e:f8:e9:58:7d:7d:
                    1a:09:92:58:93:a2:db:1a:57:97:1a:39:1a:44:a5:
                    5a:a1:d7:9b:8f:01:e2:96:8b:62:81:6c:31:d0:80:
                    c2:fe:e3:3b:19:ac:7d:e8:ab:d0:d9:5e:65:16:81:
                    75:7e:ee:58:00:45:56:17:7a:c3:00:30:74:4d:0b:
                    5c:2d:de:f7:b6:01:fd:94:6e:05:d8:2c:65:0c:d1:
                    7f:9a:5a:2d:38:24:47:35:68:00:38:55:4f:9e:9f:
                    59:bc:26:4f:f0:a8:47:59:26:15:b4:2c:ab:2b:ae:
                    c4:c3:3f:15:12:c3:95:14:e3:8d:d1:0c:c7:23:9e:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:F4:76:69:C7:88:EC:C1:0B:E2:58:06:82:EE:58:E1:97:57:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:6fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:a9:86:dc:62:d8:23:a6:0d:b8:f4:51:39:39:01:70:e7:
         b2:4f:03:2b:00:5b:6d:95:62:24:3a:3b:47:63:ec:21:a0:f5:
         d7:62:34:9c:17:ba:7d:45:03:6e:95:e5:c3:ba:8e:70:7c:f0:
         c7:7a:61:a4:b5:56:b7:cc:ed:ac:97:b1:4a:cb:c1:a8:f5:2d:
         05:de:ce:5a:d8:6f:a0:71:46:44:86:35:7f:0f:db:50:42:12:
         21:06:4e:3c:f3:28:88:4b:af:aa:18:fb:ca:1f:4c:6d:93:f1:
         b8:cb:13:89:48:3b:6c:60:37:83:a5:0d:dc:50:f0:f9:a2:71:
         46:b4:27:d7:c0:ea:4f:20:17:f9:c9:82:a9:ec:74:92:9e:f6:
         94:ae:70:3a:63:c4:cd:e3:2a:0d:ed:11:ac:75:21:d7:ec:59:
         71:35:fe:08:16:29:f9:27:c5:13:36:41:ed:86:d9:90:16:d6:
         e8:18:a5:ba:33:83:3f:e5:78:7b:9f:59:b4:06:81:e0:c7:53:
         62:d5:6d:7b:5d:7b:f3:61:50:77:6b:a0:90:d9:b4:9b:23:e2:
         92:f4:ae:96:99:2f:5d:94:0b:69:48:32:fd:8e:8b:f4:08:3a:
         11:15:ed:04:33:22:b1:d5:47:10:5d:d9:5f:d2:d3:ad:88:ce:
         8d:47:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:08 2025 by rpki-client