Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e4fa9076-15c0-3339-83dc-baf132bd026a.roa
File:                     e4fa9076-15c0-3339-83dc-baf132bd026a.roa (raw, json)
Hash identifier:          8b0FBONCW9z4Cw7Cix8bl1PPnkz6Ese/aJie+xprpMI=
Subject key identifier:   69:A9:2B:3E:A2:C3:62:D2:76:65:89:08:2B:E8:16:E7:8D:61:38:05
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A7122181B5E8182AF96E44980
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e4fa9076-15c0-3339-83dc-baf132bd026a.roa
Signing time:             Mon 07 Jul 2025 18:15:48 +0000
ROA not before:           Mon 07 Jul 2025 18:15:48 +0000
ROA not after:            Sun 05 Oct 2025 18:15:48 +0000
asID:                     5650
IP address blocks:        2601:2018::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:22:18:1b:5e:81:82:af:96:e4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul  7 18:15:48 2025 GMT
            Not After : Oct  5 18:15:48 2025 GMT
        Subject: CN=f918d835-f46e-4df6-8be4-ef0cc3fc6f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:d1:d2:ec:72:1b:d4:fb:f9:06:86:86:62:
                    a1:4a:5a:b2:53:4f:9b:2b:5e:fa:fc:7f:99:de:68:
                    00:d5:58:3e:94:04:c7:2f:1a:98:3a:a9:5e:3a:22:
                    71:60:eb:b1:b8:5c:01:b0:ee:5d:25:63:35:16:14:
                    30:8f:f3:6f:f5:68:da:10:0e:85:27:3f:85:47:3d:
                    e0:bf:cf:1d:e5:0a:3c:a7:6e:e6:9c:22:54:36:8f:
                    37:4d:68:6e:c1:f6:92:21:ac:0f:6c:b5:79:53:8c:
                    9a:39:23:03:3b:ad:fd:29:9b:28:05:7f:17:a9:5e:
                    a9:ff:40:47:e6:f7:5f:14:bd:f1:92:ce:0c:6e:d4:
                    c7:93:1e:2d:5c:d4:a5:40:90:ab:2b:1c:b4:79:cb:
                    3d:7e:cc:91:29:4c:d7:09:3d:69:03:2a:2a:35:47:
                    8a:a1:97:ee:7b:e3:92:7c:87:e0:30:bc:da:7c:3d:
                    df:f2:25:d3:a8:59:25:f6:8f:4f:a8:40:46:28:95:
                    ea:e2:de:e0:db:81:45:10:7d:63:05:11:3f:6e:3f:
                    6c:c3:e2:9e:8f:3a:67:18:36:dc:61:f9:ef:e3:13:
                    95:2b:01:52:1a:43:75:f4:71:a3:8c:f6:d0:62:3a:
                    9c:af:30:97:22:bd:c0:4a:46:44:9c:f3:ac:e9:9d:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:2B:3E:A2:C3:62:D2:76:65:89:08:2B:E8:16:E7:8D:61:38:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e4fa9076-15c0-3339-83dc-baf132bd026a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2018::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:50:85:de:49:f9:02:e3:81:c5:13:e3:a8:5c:8d:52:46:
         35:4a:e3:b9:e0:f8:82:3d:50:c2:ab:c1:52:a9:de:c9:c0:60:
         53:45:7e:71:6b:d9:07:9c:b4:aa:6d:69:e5:8f:bb:63:ec:59:
         86:52:ce:a2:cd:63:39:2b:e2:d8:2e:f9:81:8d:27:14:bc:46:
         16:45:a5:3b:7f:66:9d:e3:d2:d8:01:34:ac:28:b6:d8:ba:6f:
         5e:45:3b:2d:a2:22:50:62:95:4c:dc:77:32:db:f2:11:14:3d:
         71:f7:0f:99:63:3a:a3:f7:36:3e:76:78:1d:46:10:27:21:67:
         4d:b9:34:37:07:61:2c:fb:cd:4d:2a:cf:23:c8:a1:86:b1:b2:
         b8:b2:69:d5:b6:f2:d9:0e:98:1c:6c:a9:c8:4a:10:0a:9d:71:
         61:f9:7e:5f:5e:3c:d0:d4:60:65:56:86:6b:b4:32:c7:07:f2:
         40:0f:83:68:7d:b9:43:8e:ff:1a:f4:a5:3e:f3:f4:e8:48:e7:
         7f:e8:eb:02:0a:9c:0e:73:3b:52:f2:60:89:13:b0:74:ad:c6:
         e0:7a:be:66:25:d6:cf:e4:c9:24:88:e5:52:5e:0a:0c:32:28:
         d1:f6:4b:cd:6f:01:71:39:db:73:3d:21:53:7d:ec:25:34:23:
         95:08:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:20:15 2025 by rpki-client