Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9650f15-c396-3fb6-990e-d8437ffc0739.roa
File:                     a9650f15-c396-3fb6-990e-d8437ffc0739.roa (raw, json)
Hash identifier:          i3NeUBG/QNP8lDUOQh+hga1EFCJVszrbW6DrZUHsw/E=
Subject key identifier:   E7:61:37:C8:AC:A3:DC:9D:A3:58:A2:F6:67:73:0C:E4:8B:D9:30:50
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84123BF1B84A7E1F79F1DD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9650f15-c396-3fb6-990e-d8437ffc0739.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        2600:1901:c120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3b:f1:b8:4a:7e:1f:79:f1:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b5e1c33e-4403-4088-8c1c-fc6246a73f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:0f:a1:45:42:61:68:62:7b:0c:32:5f:49:
                    b9:e1:7d:47:99:10:d9:f1:ff:1a:ca:3c:bc:e9:9f:
                    46:c5:fe:be:15:2a:47:23:b6:e5:28:10:2a:98:29:
                    7f:22:e1:7e:c9:78:af:74:b6:b3:bf:de:e5:ee:0f:
                    9a:0d:ac:a0:cc:e2:ac:21:96:e6:3c:cf:8d:7c:6d:
                    0d:9a:cc:87:e2:96:48:a6:a3:46:00:10:e5:9c:ad:
                    1c:bd:e2:e9:a8:87:ae:8a:77:be:a8:26:79:ba:e2:
                    95:61:fa:2e:a2:f9:69:b3:64:5e:8c:ff:e2:83:a2:
                    c0:ea:ee:07:ab:96:2a:38:e0:b9:cc:5b:77:47:1f:
                    5d:07:fa:44:0e:33:68:7d:d5:50:ec:22:2b:5a:fc:
                    82:6c:48:5d:32:50:2d:dd:56:84:3d:82:03:43:53:
                    23:5f:53:08:a2:3d:fe:66:b4:04:e4:90:86:0e:b6:
                    ff:f1:d2:ef:e5:6b:28:cf:7b:34:3f:47:8d:f9:18:
                    1e:35:3d:04:38:82:06:8a:d1:37:8e:bf:a3:cc:0f:
                    ae:cb:74:c5:23:f4:ff:6a:9e:f0:7f:92:c7:73:97:
                    2f:88:79:77:9c:c7:06:6a:9b:88:7d:73:cf:34:28:
                    8d:b1:fc:f0:0d:ca:17:e1:1a:c5:eb:15:cd:bf:38:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:37:C8:AC:A3:DC:9D:A3:58:A2:F6:67:73:0C:E4:8B:D9:30:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9650f15-c396-3fb6-990e-d8437ffc0739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:c120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:26:cd:4c:f7:95:2e:6b:ed:23:a3:49:97:54:01:42:a9:d0:
         68:13:59:ad:50:fe:e5:7b:61:63:e0:9f:27:ea:22:f5:32:75:
         2b:33:1a:a3:e8:55:a0:b2:21:d8:2c:7a:28:cc:98:aa:f5:ac:
         ff:74:3c:29:24:c4:4c:b9:75:d1:a5:7a:8b:57:df:55:d6:a2:
         f7:cb:a0:9d:aa:3e:ed:5c:03:69:d0:09:cc:99:a9:33:8a:73:
         dd:7c:de:4a:a9:dd:2f:fb:9b:ff:b3:bc:2c:8a:b8:5c:6e:8f:
         27:93:dd:7a:08:33:2d:83:74:71:5c:f8:cf:aa:1a:0c:5c:17:
         96:2a:94:96:12:9d:52:c6:60:1e:be:60:d9:dd:28:de:fe:e4:
         09:cd:f4:a8:54:ac:f8:e8:9e:03:1a:bb:64:41:eb:28:7a:70:
         07:e4:1b:a8:2e:23:c0:30:d0:53:17:ab:18:04:93:8f:06:de:
         d5:80:26:3c:f9:88:71:37:47:a9:53:f3:f4:e2:6e:35:f1:ac:
         63:d9:24:ea:2f:cb:f1:c3:7d:61:48:14:e6:f7:09:9b:6b:b2:
         77:cb:bf:88:9f:eb:62:12:70:36:5c:4a:6c:0b:b4:dc:50:2a:
         6a:f4:f8:10:ef:6d:75:d5:0c:d4:31:5f:cd:33:d4:ca:3c:17:
         0b:2a:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:20:41 2025 by rpki-client