Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa
File:                     46286078-f61e-3aab-8dc8-b7dddadab07b.roa (raw, json)
Hash identifier:          ugtGI78kd4CisGdr+KhLxxbffDy2t2s2aNW/tn4E/mU=
Subject key identifier:   3E:D6:1C:07:44:D3:BC:A2:99:02:B3:A0:E4:A1:B9:64:F8:8C:C1:8D
Certificate issuer:       /CN=837c453a-673f-4481-b4c4-21ece5899901
Certificate serial:       010D0C9F4328584A0C0577752B413A328ACDF100
Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     46475
IP address blocks:        2620:a6:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:77:75:2b:41:3a:32:8a:cd:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6653ba4f-8a1f-4a3f-8aab-fe2ba0a454e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:1d:1f:83:d7:13:df:95:50:7b:0a:3d:df:
                    35:76:22:26:ad:86:82:65:75:ff:57:79:43:a7:80:
                    3b:2a:95:e9:82:60:63:bc:01:d7:70:46:5a:ac:4a:
                    3e:7f:9c:42:b1:4f:37:e8:ef:9d:df:08:af:86:d3:
                    73:50:76:70:d4:03:fc:ed:e6:13:e4:19:4e:a2:1c:
                    1d:7e:8d:a0:81:b3:fe:16:5b:70:60:87:db:f4:46:
                    30:03:43:3c:59:c3:32:19:56:12:cc:47:bb:94:18:
                    86:8a:a0:86:86:85:e4:f1:cf:5a:10:d0:b8:24:93:
                    c9:97:a6:c8:83:eb:fd:38:01:a0:4d:d7:ca:bc:0b:
                    b5:2f:8a:05:2e:0c:bb:f5:9a:3d:dd:78:de:d6:a1:
                    06:f4:82:ef:b1:7c:21:d0:db:04:74:c7:c1:be:4b:
                    d4:a5:29:86:2e:9b:98:81:53:2a:f6:02:ed:c5:7b:
                    66:59:f5:39:d9:eb:53:6c:4e:81:58:0e:43:76:08:
                    d5:8e:cf:99:18:51:1d:48:0d:0d:f8:43:2d:bc:32:
                    a7:90:f4:23:92:a9:ec:70:38:47:32:ba:42:0c:0f:
                    d4:54:52:fd:dd:28:ef:52:3c:14:61:f5:b1:22:50:
                    4f:da:4e:6d:ce:14:89:fa:4d:46:b3:1d:92:a1:23:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:1C:07:44:D3:BC:A2:99:02:B3:A0:E4:A1:B9:64:F8:8C:C1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/46286078-f61e-3aab-8dc8-b7dddadab07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl

            X509v3 Authority Key Identifier:
                keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a6:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:5b:ff:d6:77:0f:87:5c:59:c7:c8:23:ae:6d:1b:91:86:
         3e:d0:e5:98:bf:e0:7b:61:5c:da:f1:9d:c0:02:26:e4:d3:3b:
         94:c5:72:27:2a:bf:88:d4:7b:8d:0e:83:3a:0f:ff:55:78:3e:
         ca:5a:98:ff:9e:05:4f:01:4e:c3:0a:ce:c4:56:ab:64:06:68:
         9e:90:85:75:98:05:13:b4:1a:93:30:f6:e4:29:62:ce:b4:c8:
         99:e4:c5:76:09:eb:3d:26:e4:1c:bd:f7:54:31:56:7d:16:eb:
         9a:d8:08:9d:5d:64:fa:18:12:e8:1b:28:35:4c:42:b8:8a:b3:
         e7:52:0f:93:7d:43:8a:17:23:7f:0d:0c:eb:6c:28:55:4b:2e:
         27:ed:cc:eb:ed:63:44:cb:b1:14:ab:a6:cc:86:9a:5b:9f:94:
         cb:97:31:4c:04:09:a0:38:8e:0d:eb:c1:19:d5:ca:28:05:df:
         c3:14:15:22:80:92:d4:aa:12:cc:ca:a9:bc:bc:0f:4c:06:c6:
         25:23:f7:bd:65:f0:d1:c5:37:06:02:2b:85:9a:ad:e6:c8:e7:
         0b:3f:4e:46:ce:f9:d8:8b:c8:69:9d:8c:9b:72:65:0e:a9:dc:
         7a:e1:94:5c:ca:60:a0:21:4a:df:c0:d0:fa:2d:db:a5:ae:47:
         fa:47:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:21:19 2025 by rpki-client