Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa
File:                     4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa (raw, json)
Hash identifier:          8Ek+RKsif7sbYkXbGhH/csDD7SUb5Y+bVZC2ptXzn4c=
Subject key identifier:   98:32:59:22:EB:97:AA:6E:C2:38:10:9C:69:64:63:2F:E1:82:53:64
Certificate issuer:       /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial:       010D0C9F4328584AE1971C0BA9643C735C5FAE00
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        2606:b740:1::/48 maxlen: 48
                          2606:b740:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1c:0b:a9:64:3c:73:5c:5f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=10a674d0-83e8-4973-8574-49199646dcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fb:f0:c0:62:92:8d:53:b3:df:68:32:c6:fe:
                    f9:f4:4c:dd:4c:24:34:76:c0:d2:08:d8:21:a4:5c:
                    51:7a:75:72:7e:3a:a0:99:11:fd:9a:71:3d:5c:9a:
                    35:c3:48:de:c9:b1:47:f1:e5:29:30:db:b7:60:d4:
                    ab:1f:f1:de:04:39:81:93:25:98:14:15:1b:94:e6:
                    a0:ab:41:86:fa:ba:93:ad:68:c5:7d:67:2a:d3:db:
                    f7:75:17:ce:91:68:71:75:d0:7c:ee:44:e1:4b:c4:
                    6b:ef:a9:10:4a:e1:33:34:01:da:9f:68:de:3d:b8:
                    81:38:85:de:f4:bc:38:50:fe:75:4e:ce:65:29:7d:
                    fc:26:5b:eb:65:64:c2:c2:c7:e7:e0:f6:0b:a8:51:
                    9e:d0:dc:c3:c9:4c:f7:31:67:97:56:ce:78:2c:03:
                    af:e1:93:34:bc:94:6b:bf:87:43:af:62:72:c0:b6:
                    2a:ff:d8:69:78:10:33:0b:c2:fe:64:f2:29:80:47:
                    92:56:1a:ac:24:19:89:1e:5a:dc:df:7f:0b:63:d6:
                    3e:17:ef:cf:55:c6:c5:16:fd:f8:f8:d3:4a:97:18:
                    4e:e3:6d:1c:57:26:9b:33:4c:6e:5f:5e:f6:99:dd:
                    1f:23:75:92:c0:b5:59:aa:68:c7:df:94:b6:08:5d:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:59:22:EB:97:AA:6E:C2:38:10:9C:69:64:63:2F:E1:82:53:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/4cb2cfa6-2ee0-39e4-b8b2-0386df10379c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl

            X509v3 Authority Key Identifier:
                keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b740:1::/48
                  2606:b740:49::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:30:75:98:d7:ad:e6:16:59:23:32:27:c4:78:07:5a:2d:
         11:85:f9:9b:e9:8b:5b:8a:3a:34:87:3d:05:8f:b5:ce:cd:a3:
         ca:eb:a5:3b:10:81:38:09:b1:3d:85:b4:3d:75:c0:fb:b8:fd:
         d2:19:5c:54:70:f6:26:15:fb:1e:2c:95:af:68:c4:b4:65:28:
         cc:fb:dc:a9:85:e6:60:b6:90:34:e4:a0:cf:f8:7e:e0:40:6d:
         15:ae:9d:79:cd:8a:6f:76:b3:06:ae:ad:70:fc:b7:df:19:90:
         3a:ca:67:0c:f1:8a:5f:94:39:8f:dd:a9:51:64:9f:5e:a3:7d:
         5f:f2:b8:ce:fd:97:fa:55:75:59:bd:05:b4:5f:d0:be:ab:90:
         62:4b:c5:07:fb:86:54:56:fe:65:ed:f7:37:6a:22:22:85:1d:
         6b:dd:27:bd:60:40:fa:f1:82:86:55:60:5d:6a:df:c0:21:34:
         f3:2e:54:43:b2:38:75:58:8c:bf:70:06:8d:0c:95:a8:cb:c8:
         53:1d:26:46:1d:9d:3d:ab:25:d6:02:cd:c5:c4:30:b4:2e:5e:
         75:f5:43:87:dc:09:27:e8:e3:70:e4:73:f5:d2:04:12:bc:5f:
         99:f0:63:87:4f:31:f1:1a:a3:00:b4:97:ba:c6:62:46:df:40:
         c2:44:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:30 2025 by rpki-client