Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
File:                     0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json)
Hash identifier:          toqCUyz/oq2Sh7A34Jfo6KtJN2YTnevPeFwCDNIP2pE=
Subject key identifier:   89:FB:FA:60:E2:DA:E7:A4:2A:61:32:36:89:82:73:66:47:64:49:8B
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A735099528CE02CD100985080
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     4213
IP address blocks:        2604:4040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:99:52:8c:e0:2c:d1:00:98:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ffd116ec-6031-42f9-9c1c-a3c128289067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:fb:8a:a1:93:af:b3:9d:2b:84:c5:94:8c:
                    af:5a:38:0f:09:45:cb:65:66:56:3b:44:65:60:86:
                    11:cd:ed:97:92:c6:dc:99:ba:a8:70:89:ac:31:6b:
                    e3:f5:14:e5:cd:70:08:ed:4f:f9:cc:7a:2f:38:e0:
                    3d:01:52:1f:aa:32:50:0d:2f:f7:18:fc:37:74:90:
                    f4:37:6e:fa:c2:42:82:e0:d2:f6:9a:ed:3c:0c:c7:
                    a6:68:86:77:93:bf:98:97:36:e5:15:6d:62:82:77:
                    29:e0:48:78:73:73:76:18:01:57:e6:91:35:05:af:
                    d0:bd:18:1d:44:c6:d1:c7:b8:03:df:f5:de:df:08:
                    3c:85:2a:cc:98:1e:70:fe:e0:df:9d:ff:19:07:4f:
                    02:f8:2c:34:0a:98:03:2d:a1:6f:54:13:b2:aa:e4:
                    15:63:4c:04:5a:54:e2:c1:06:26:d4:5f:aa:1b:9c:
                    4b:2b:58:8a:64:bd:15:c8:d0:96:ab:47:ae:82:28:
                    70:25:62:ca:ff:07:57:c5:38:fa:92:ed:14:80:39:
                    e9:2a:7a:f4:2c:ac:f8:6c:97:13:8d:fc:15:f5:f2:
                    29:9b:62:2b:91:23:6b:da:aa:c7:a6:2f:ef:fb:86:
                    5e:ad:fb:9f:16:6b:6d:62:8d:55:60:9b:52:e3:e9:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:FA:60:E2:DA:E7:A4:2A:61:32:36:89:82:73:66:47:64:49:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:77:84:bb:6a:15:42:e0:cd:10:0f:dc:8d:c6:2d:9c:1a:
         a2:6c:e2:ad:8d:d1:fd:10:f4:df:5d:c4:2e:19:59:1b:90:48:
         27:df:50:fd:3a:61:c8:79:23:62:37:52:07:ee:c0:60:86:ff:
         d8:c6:8b:d5:22:69:9c:2e:f5:fc:1b:f0:63:98:dc:85:e3:f6:
         79:39:28:0a:af:18:b1:a1:9c:e3:f8:b6:63:17:e0:13:25:27:
         d1:f5:9b:d8:ce:77:3b:35:d6:cd:10:7e:45:15:df:22:4e:ee:
         70:23:11:c8:17:64:fc:c0:5f:01:f6:60:e7:59:ee:6a:83:b2:
         72:ce:ef:a2:d1:56:f0:68:26:09:4f:23:b9:96:59:b3:2f:a2:
         aa:60:cf:1b:78:c4:54:38:f8:ca:61:1e:e1:a4:ce:fd:21:6d:
         0c:b0:94:4f:46:4c:c0:33:44:1c:a4:eb:f7:bc:36:e9:0a:1f:
         81:b8:c0:e8:ae:ad:94:96:96:c4:84:5a:88:d2:26:38:24:d7:
         0d:b6:79:09:22:7f:10:96:8c:26:be:8c:69:9f:f9:11:d0:0e:
         93:3c:74:38:9d:77:d7:49:a8:ea:28:24:15:7e:fb:3c:0f:cc:
         6a:3c:2e:18:df:97:b1:37:d2:12:ea:56:51:a6:92:64:af:05:
         f8:a8:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:10:08 2025 by rpki-client