Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1139158b-fe96-3f34-b802-c1e032187636.roa
File:                     1139158b-fe96-3f34-b802-c1e032187636.roa (raw, json)
Hash identifier:          9otpa7MLFj8qCAl3WZYoSq8kWujJvPKYTaRU7QCr4A4=
Subject key identifier:   AC:8A:AB:C0:B0:DD:E7:15:C3:09:95:0B:96:8F:8C:F7:4E:6E:06:F2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84123B84C253C2ED74646380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1139158b-fe96-3f34-b802-c1e032187636.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        2600:1900:4110:800::/53 maxlen: 53
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3b:84:c2:53:c2:ed:74:64:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=30306faf-16f4-4f22-bb74-8b484a7b5c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:8c:b5:65:5c:c0:66:68:dc:14:26:c6:53:
                    96:ad:6d:1d:3b:0c:b1:ef:21:77:09:e4:3c:47:de:
                    85:3e:da:cf:fb:c0:5e:48:91:84:3c:fa:2d:ff:83:
                    bc:1d:6e:4c:a1:57:ef:f5:56:60:12:a5:38:cb:d4:
                    b8:ad:c1:e4:f5:08:57:a3:ab:95:73:cd:33:84:ca:
                    2f:e1:65:ad:52:32:f0:77:bc:0f:6e:59:ce:bd:fe:
                    fd:ac:d9:80:72:d2:15:78:b5:a5:83:1d:5e:6c:89:
                    54:87:45:ee:db:91:53:ba:ce:7e:14:b9:96:b5:98:
                    9f:99:da:63:a1:3b:82:75:22:65:ff:3b:5b:62:a1:
                    9c:01:c4:24:05:ce:fd:cd:df:3b:79:98:3c:d5:b4:
                    8f:7b:06:fd:8f:66:a9:66:e2:f2:2d:9b:4d:66:d3:
                    c4:b2:ed:73:a8:32:09:fe:e3:30:10:6a:00:9a:b9:
                    de:8e:fb:97:81:13:1c:4e:bb:29:2d:af:47:b5:2e:
                    ff:0c:84:d6:ed:1e:35:bb:61:7e:b8:5a:64:15:a1:
                    44:f4:a9:bc:2c:c5:d5:c5:14:8c:e4:d7:08:b1:52:
                    23:77:38:20:91:20:67:08:7d:f8:8c:90:e8:7c:1c:
                    c8:bd:35:52:86:29:70:30:77:c9:bf:0e:0d:b2:17:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8A:AB:C0:B0:DD:E7:15:C3:09:95:0B:96:8F:8C:F7:4E:6E:06:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1139158b-fe96-3f34-b802-c1e032187636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:800::/53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:32:a4:7f:c6:64:8f:ad:df:e2:e0:2e:b2:62:f9:60:1a:a8:
         48:75:58:fe:4e:82:19:3f:f8:ac:bc:31:d4:16:82:f6:bb:26:
         8d:15:9f:67:0d:33:d0:13:5a:4b:9a:f2:11:a9:f7:6c:ee:98:
         15:57:e4:63:04:06:28:e0:00:4b:a8:62:c3:2d:e0:b7:1b:c3:
         94:9a:27:17:0f:ec:2e:2e:d9:ed:8a:d2:52:f9:7f:e7:1f:1b:
         47:81:9b:3d:b8:00:a9:8e:70:c2:99:2c:5f:a5:14:5d:2a:ea:
         d6:70:80:7d:70:36:19:72:2b:c3:e9:a8:02:cc:90:82:d2:34:
         bc:72:52:d3:af:85:48:ef:6f:d8:d1:69:10:d4:64:0b:d8:77:
         26:73:ad:25:1a:aa:d4:ad:96:3f:a2:a4:d9:90:17:3d:24:2b:
         71:fa:2b:5f:5d:b3:d1:45:bd:c2:b9:df:9c:26:48:c7:f9:da:
         df:26:5c:72:86:f1:4b:f9:7d:fb:b6:d8:94:50:ab:a1:65:ad:
         58:4e:d4:9e:b2:41:53:d8:dc:6b:a3:51:6d:97:b3:7b:7a:8e:
         4a:f2:31:f2:5e:ca:ae:0f:7b:fc:eb:74:0c:c4:80:b6:d5:87:
         df:74:cf:c9:9f:76:92:f3:0c:38:34:0f:95:a7:f5:47:e9:30:
         cf:8e:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:23:25 2025 by rpki-client