Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
File:                     04623bed-8a51-304e-9d94-54b88dab4623.roa (raw, json)
Hash identifier:          q/xCTTPuA+WmsEYG0ttN5WkaPL1b5otaGGjkMfqviBo=
Subject key identifier:   AA:C4:58:B3:D6:A9:B3:1B:44:86:89:75:A8:91:8A:6C:DF:1C:FF:D9
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584A682602BF817EACB748756480
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        2602:fcee:ff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:02:bf:81:7e:ac:b7:48:75:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=75fb2084-cbd3-4403-a334-edfea422f6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:bb:bf:5c:75:b6:8e:c6:ed:f8:ec:73:9c:
                    86:ef:8e:23:ff:94:da:c9:1d:e3:28:80:8f:12:a5:
                    45:d6:11:f4:45:fe:58:46:6e:da:37:85:69:02:ec:
                    a6:cf:60:c9:74:f3:78:17:fc:fc:70:c8:2a:75:a2:
                    42:9b:0c:ab:66:5c:9d:01:e8:9e:2a:c8:6b:ab:8f:
                    9d:b6:71:a9:01:40:e3:3b:2a:03:18:24:7d:26:84:
                    6c:13:31:58:3d:dd:9c:5b:1b:fc:7d:04:5d:a5:f3:
                    9c:9a:70:1f:e1:be:0e:29:85:de:c8:57:38:c9:e4:
                    e2:2b:4a:ab:30:87:4c:50:10:e9:78:55:a0:00:f5:
                    b4:9c:bf:9a:46:a8:ec:f6:28:2d:b2:ba:98:f5:c5:
                    23:3b:09:6b:00:c9:30:31:6e:6a:35:2c:90:7c:f1:
                    6c:bd:50:7d:58:7e:32:7d:08:3f:63:83:eb:79:76:
                    fb:62:86:28:df:5c:98:e6:91:50:5a:17:ff:c8:d9:
                    0a:06:a1:bf:76:39:02:2e:0a:03:90:a6:4d:83:40:
                    da:25:57:e4:45:c0:11:54:27:aa:57:81:53:7b:99:
                    ee:78:71:ae:66:8e:79:8b:4d:c2:00:98:46:22:dd:
                    99:06:ff:43:97:a7:4a:1f:96:5d:3e:34:12:12:f8:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C4:58:B3:D6:A9:B3:1B:44:86:89:75:A8:91:8A:6C:DF:1C:FF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:ff8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fd:99:3a:70:e7:6a:97:12:36:88:44:53:31:33:92:0d:04:
         30:fe:b6:a1:fc:f5:d2:b9:ca:73:c1:d4:a8:18:93:fc:35:78:
         13:b2:e4:6a:5e:38:94:d4:8a:ae:d6:a4:ab:cd:de:09:2b:09:
         fc:5b:11:22:63:d5:b5:af:d4:4f:84:51:0e:78:23:e8:94:0a:
         8a:2b:60:3f:31:a7:86:ac:e9:7b:db:99:93:97:e0:d8:14:9d:
         21:d8:9d:77:3e:21:5d:f2:18:f5:e1:9b:dd:30:86:b5:e9:33:
         dc:4e:92:b2:8d:53:d2:4e:5d:18:c2:82:f1:34:45:6b:36:46:
         95:71:eb:8a:0a:c5:93:bd:d2:d3:af:71:48:12:df:cb:3d:2f:
         70:c1:1b:d2:63:63:f8:0f:98:82:91:ab:9b:07:77:fe:ae:ce:
         6e:ac:d6:3a:0c:56:a1:29:bf:48:e3:ae:3a:91:05:10:99:da:
         b0:7f:a8:c0:16:db:48:b4:6d:e2:a7:f6:94:66:cf:6f:d2:22:
         3a:b9:33:fa:4d:ad:c1:e7:da:b5:aa:68:ff:6a:53:c6:04:7f:
         1d:f4:7a:fa:1b:b6:a0:7c:98:16:b0:97:ac:ff:e8:80:ca:cb:
         60:5b:3a:6c:f1:b3:68:07:03:46:fa:e5:8a:84:74:78:52:b1:
         f2:5d:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:06:34 2025 by rpki-client