Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa
File:                     43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (raw, json)
Hash identifier:          t0tEgFOq2rdGVt5sWQKaI5OgPZAU/S3DVSVnld3DCYE=
Subject key identifier:   93:46:F7:02:7A:66:89:74:50:8B:54:E7:80:C7:51:DA:1D:7F:4D:87
Certificate issuer:       /CN=04c216c1-5924-4a66-9346-a1f215800ceb
Certificate serial:       010D0C9F4328584A7085F0794C0C224ED85E8240
Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     399889
IP address blocks:        2602:fc54::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f0:79:4c:0c:22:4e:d8:5e:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=5c0224df-7376-4ccf-9a2d-4dc32aec6aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:9b:76:e7:24:fb:a2:f9:5b:c1:ef:e7:bc:
                    83:94:81:0b:0e:6e:b1:2c:2c:bc:97:12:16:a3:57:
                    f8:39:7f:65:8f:59:03:8b:6a:13:72:d2:d3:14:d2:
                    15:2b:6e:16:d3:c5:11:4c:85:e5:80:ac:52:79:e1:
                    f8:df:6a:c9:29:26:ba:04:2b:43:98:5f:b8:8c:f1:
                    89:f2:f9:bf:12:e3:5e:68:ca:81:e8:ca:28:d8:64:
                    0a:da:4d:97:3b:85:42:82:c6:5f:f4:84:d1:77:cc:
                    2f:cd:45:33:08:3c:0a:cc:b8:77:71:80:da:d3:fd:
                    e7:1c:43:4f:d5:8e:db:e2:49:a4:c7:2e:7f:17:46:
                    2e:b7:01:91:2d:65:ef:ba:b6:a1:b1:9c:ff:6f:ec:
                    41:4e:b9:e3:e6:24:b9:28:79:f5:4d:ba:47:69:36:
                    07:0c:09:85:cb:be:2a:33:14:a1:59:82:91:b5:c5:
                    5a:b1:23:a5:78:c1:2a:25:2f:67:53:ca:76:79:d9:
                    b6:38:b0:c7:96:b6:ef:d2:d1:61:2d:02:7c:f8:05:
                    44:6d:d8:0b:48:d6:7c:96:4f:91:ae:28:8c:d5:0c:
                    f2:ac:aa:f1:3c:8a:f0:2a:cc:50:bf:7e:e4:33:0c:
                    b1:22:ac:b4:84:a1:12:c0:5c:ad:93:b9:0b:97:cf:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:F7:02:7A:66:89:74:50:8B:54:E7:80:C7:51:DA:1D:7F:4D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc54::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:22:90:17:59:f8:04:22:4f:cf:1c:14:71:c1:98:b1:c5:09:
         06:da:78:c2:c9:d0:c4:e5:71:a9:9c:e4:56:3e:f7:2d:e2:14:
         0c:b8:73:2f:66:71:42:ea:ed:89:5e:03:70:2e:67:1b:d7:82:
         69:3b:a5:e7:4d:73:bb:c2:67:ba:89:1e:1d:09:45:e1:ec:4f:
         2b:27:f1:0e:e4:07:b2:97:c5:7e:bc:42:e4:ce:7c:0a:d5:cf:
         f7:1d:47:b0:3b:65:05:99:5f:01:ba:6c:86:9d:37:9b:26:c8:
         b5:c2:d3:e5:6e:51:96:6a:42:47:67:b7:12:3f:53:26:15:55:
         d9:e5:aa:87:90:54:a5:09:3d:51:66:1f:06:21:b8:bb:f2:e4:
         3f:40:4b:15:4c:44:1f:fb:89:1b:60:9c:14:a1:86:48:1e:e8:
         2a:75:9a:ec:e1:d1:6c:d3:ce:60:c0:21:c4:48:be:d3:a9:96:
         af:12:39:80:a3:63:88:54:8b:f9:86:ed:ed:c8:fc:c4:dc:b1:
         37:34:d1:62:ab:ce:25:3d:90:0a:bc:46:ed:43:cd:e8:f9:f0:
         af:1f:4d:3a:ca:d6:53:42:13:f5:ab:59:2e:d9:3c:c5:95:79:
         5a:85:7a:ae:47:e3:eb:a4:2e:58:c3:08:9c:51:90:08:5c:04:
         45:ed:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:32:59 2025 by rpki-client