Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
File:                     a18857b3-bcc7-3703-9486-773d81f811bd.roa (raw, json)
Hash identifier:          e9p4dAiyCAMd2L9jVryZbcPs5+Eby4XJzWlyzJhJz2Q=
Subject key identifier:   53:BC:91:03:FB:9A:7E:AA:82:A9:9F:39:82:60:75:A3:C6:B7:F1:E7
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584A6DBB41A7E8D692020CD1F780
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:41:a7:e8:d6:92:02:0c:d1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=11cf8328-df2c-4670-b1a4-32febbd432f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:fd:eb:4d:48:62:62:d6:b6:0b:db:5a:c8:
                    5a:36:e4:20:87:c9:57:cf:3e:ce:e3:8e:a6:e1:a3:
                    1d:f0:bd:75:6a:e8:57:ab:35:64:3e:cd:52:3b:df:
                    1d:9b:55:f2:22:a2:75:0c:0d:9d:c3:59:8e:08:d2:
                    a5:a5:48:10:cd:ff:7d:d7:a4:b0:c7:d0:43:b2:c0:
                    9a:c7:4f:e3:50:1b:08:81:93:2b:54:57:ba:66:ea:
                    a9:78:f9:2b:66:c5:cb:10:f6:84:95:cc:5d:30:b4:
                    b6:99:4f:42:1c:a9:cb:d8:df:86:21:65:e4:0a:47:
                    65:6e:d7:d1:66:f0:6b:2b:3a:7f:29:03:60:0e:18:
                    6b:7b:1f:4a:10:7c:b9:29:00:9f:14:2e:47:74:24:
                    1a:61:74:fb:85:2b:75:51:82:b8:18:20:f3:7f:52:
                    ef:00:86:75:6d:26:e0:04:0d:ec:a8:dc:fc:ba:94:
                    f5:bd:50:a4:31:a3:d1:7f:a0:20:43:44:ce:e4:18:
                    eb:66:f1:6f:94:a6:3e:f3:75:e4:f5:d3:d1:59:5a:
                    c1:8b:98:1b:4c:5a:63:cc:37:1a:17:f7:42:43:15:
                    16:b1:18:ff:2f:f3:da:7f:a6:24:0d:d6:0c:41:0d:
                    38:f4:2b:91:c0:13:d4:c4:6a:57:2a:42:f1:90:bf:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:91:03:FB:9A:7E:AA:82:A9:9F:39:82:60:75:A3:C6:B7:F1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:40:e6:a0:a4:b0:13:ea:dd:f1:79:45:fe:34:33:79:87:
         cb:a6:dd:9b:f5:89:1d:b7:8f:01:68:f3:ce:fe:67:c6:14:ea:
         63:41:64:d5:ac:0e:9b:f9:b3:f1:a9:ac:4d:ad:72:e4:3b:7b:
         72:46:0a:21:5b:95:be:d6:22:63:60:c0:bb:1d:dd:03:d3:d3:
         71:7f:47:40:a9:32:a9:ba:55:c3:a7:f8:97:45:49:00:eb:c2:
         d8:6c:d0:c3:1e:98:66:75:0b:68:57:58:dd:67:4a:c5:1f:ee:
         f4:9a:6a:d1:02:bc:97:d5:69:3f:c6:52:ff:40:78:9d:d3:05:
         94:d2:e9:33:bc:1a:61:2f:c9:93:fa:66:21:7b:19:c2:cc:f8:
         2c:ba:4e:a6:7e:a8:2b:ba:f9:be:eb:07:b6:a2:38:6d:9b:41:
         8f:ba:cb:47:12:e5:70:5c:fb:c9:8a:73:d0:0e:18:04:b9:4d:
         39:49:7a:70:b2:67:e0:52:b1:0b:53:08:92:d5:7e:a0:bb:cc:
         a7:42:48:7c:08:2f:57:12:a8:9b:1e:2c:2d:ed:44:c8:69:8b:
         d8:00:af:77:4a:fa:53:04:7b:d4:87:de:a8:89:21:0d:16:cb:
         2c:73:c7:f8:c3:0f:c1:43:74:ed:bc:ce:73:d8:d9:ca:7b:2b:
         a5:83:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:43:12 2025 by rpki-client