Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
File:                     821ceb12-8191-30c5-81e1-ac603feb60b8.roa (raw, json)
Hash identifier:          dqyvmjb0kDD5skd/XCiQHErxZHTBphvQPovzs9oSqpY=
Subject key identifier:   74:BB:D3:0B:2E:83:8D:4C:DC:B5:E6:BB:0F:18:2D:84:DC:DC:FE:8C
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584AFEE6A1B2A099F16648CDEF40
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     32780
IP address blocks:        2606:2e00:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a1:b2:a0:99:f1:66:48:cd:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=11d15fab-d507-42d7-8187-59534ab6dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:62:fd:c6:34:01:a2:0b:13:c7:b2:20:0a:
                    58:60:57:8a:4b:aa:47:91:98:ed:2b:4a:47:66:5c:
                    12:0a:0e:f7:bd:90:b7:b3:54:86:a4:1a:e2:2f:9b:
                    e0:ec:ce:81:f3:dc:5c:57:7b:a8:36:c3:e1:dd:a6:
                    92:1f:17:20:3f:e4:f1:67:3e:53:b4:29:6f:a2:57:
                    0d:f3:25:cd:93:d6:f6:ad:c8:63:7f:af:bb:5d:7c:
                    fc:87:78:d0:4d:be:bc:64:8a:ac:35:f7:e4:bf:ba:
                    ba:dd:d1:0c:e5:59:41:1d:0f:20:24:8a:42:9f:9a:
                    43:52:f5:ea:39:08:60:60:e2:ac:68:59:fa:3d:85:
                    98:50:65:59:61:cc:7a:d6:4a:04:27:ea:f4:39:04:
                    85:4b:de:6b:02:56:be:7b:75:b5:03:f7:d2:4b:79:
                    8d:82:9d:e5:27:4e:f4:ec:e8:ca:fa:35:f4:70:65:
                    10:84:be:1a:85:dc:26:f6:92:6d:b7:96:71:da:f2:
                    cc:62:b8:1d:27:c6:38:0e:35:6d:4e:71:ba:25:23:
                    84:9e:79:fa:e6:17:b9:cf:c7:d8:0e:a4:f8:e0:e6:
                    5d:53:ed:74:4a:8f:60:a4:7f:c8:7f:b5:c2:ef:aa:
                    75:98:e5:8b:b5:88:f6:1b:5b:c4:27:f2:b7:39:4d:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BB:D3:0B:2E:83:8D:4C:DC:B5:E6:BB:0F:18:2D:84:DC:DC:FE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00:8007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:64:64:4b:eb:fa:df:fd:c3:99:fc:45:03:47:56:13:0a:
         40:89:16:d7:46:d6:2e:a8:52:f8:31:12:a1:be:fb:0e:24:fa:
         e1:f7:60:20:f0:2a:1d:a2:f4:49:8e:79:21:46:da:ea:c5:ab:
         05:4c:20:9e:00:29:40:3f:47:20:1c:5d:be:7d:b9:16:0b:6a:
         45:2c:18:18:a3:2b:33:34:08:33:79:4b:d3:0d:63:d8:ac:18:
         d1:6d:fa:0d:d6:ad:74:98:b4:17:70:26:d8:90:8e:24:23:7f:
         34:93:78:39:c3:d2:b9:12:ed:4d:c6:ce:58:74:22:56:94:cc:
         bc:ee:e8:b6:cc:21:6a:1d:c5:07:2b:41:20:7c:ae:8e:c0:d9:
         b1:e7:dc:dd:ab:90:80:43:76:b1:a2:da:75:17:b3:4f:e9:f0:
         f9:fd:eb:61:a0:9a:4e:ab:70:94:8d:20:18:b0:82:9b:ea:fc:
         6d:0c:af:4b:f7:ed:46:1a:3d:b2:7b:a9:d5:cd:29:fe:2e:d6:
         38:7b:f5:0d:73:19:ea:4f:12:09:da:f7:46:b8:79:78:e4:27:
         78:c9:61:d7:49:08:2c:5f:5f:40:7b:5a:7c:b7:bb:4f:29:f2:
         52:57:16:3c:e7:07:42:7e:cd:a7:54:f4:67:99:f2:cf:ef:0f:
         62:e0:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 21:56:50 2025 by rpki-client