Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/c8f168d4-ca1b-37f3-bff6-9de989b59740.roa
File:                     c8f168d4-ca1b-37f3-bff6-9de989b59740.roa (raw, json)
Hash identifier:          rSPweMYbw0nNcZZbIqF61XPrbQWZrvMg6ppvuJsNplE=
Subject key identifier:   8E:A7:5A:40:5A:FB:86:2F:98:6C:1E:B9:D0:60:86:54:39:D4:9B:9C
Certificate issuer:       /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
Certificate serial:       010D0C9F4328584A5222D3C04CBAED7F9CA0B700
Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/c8f168d4-ca1b-37f3-bff6-9de989b59740.roa
Signing time:             Thu 26 Jun 2025 15:47:13 +0000
ROA not before:           Thu 26 Jun 2025 15:47:13 +0000
ROA not after:            Wed 24 Sep 2025 15:47:13 +0000
asID:                     14618
IP address blocks:        2606:6ac0:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:22:d3:c0:4c:ba:ed:7f:9c:a0:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
        Validity
            Not Before: Jun 26 15:47:13 2025 GMT
            Not After : Sep 24 15:47:13 2025 GMT
        Subject: CN=0a1f56e8-edde-4c30-ba2e-45d131c2e1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:28:74:ad:b8:c8:39:eb:34:62:8f:7d:53:
                    bc:f0:55:28:5c:6b:9c:1b:81:fa:fc:0d:d5:76:bf:
                    5b:de:14:dd:14:90:0f:12:a0:ee:05:84:7c:de:b0:
                    3e:4c:d4:b7:83:69:2e:65:28:14:2c:d3:72:9a:e6:
                    2b:c6:a5:a6:35:95:12:4c:38:0f:c5:3d:cb:46:a5:
                    66:17:63:96:e0:20:f9:58:a8:62:15:87:5a:12:b1:
                    7c:35:67:36:2b:17:28:71:80:d9:e0:10:5a:bf:a8:
                    56:39:2e:d4:9f:35:8e:ef:6d:49:18:93:5e:5c:ff:
                    d8:bc:3a:b0:01:71:ac:12:74:86:9e:2b:89:4f:c7:
                    85:e5:2b:66:74:02:8c:41:9d:dc:e2:bb:87:39:08:
                    f9:9c:ea:80:b0:f4:a8:56:fd:a3:62:ca:25:08:3f:
                    16:69:ff:63:0f:bc:84:e1:25:ad:4a:e5:40:29:69:
                    ca:d2:13:82:1a:15:35:67:61:19:9b:a9:a7:92:7c:
                    ea:bf:11:7b:d6:8d:71:ad:7f:41:6c:37:06:36:85:
                    d2:12:8a:6b:fc:fd:c5:7d:9e:e9:18:94:b2:b3:ca:
                    14:61:b5:4b:27:22:f1:c6:15:c9:ea:8e:06:48:af:
                    06:d7:20:70:c1:bd:a0:3f:13:f7:07:91:dd:2b:26:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A7:5A:40:5A:FB:86:2F:98:6C:1E:B9:D0:60:86:54:39:D4:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/c8f168d4-ca1b-37f3-bff6-9de989b59740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ac0:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:d8:dd:09:05:7d:bf:f7:d6:fb:da:b2:01:17:d2:bb:75:
         3f:d8:75:c0:91:6a:e1:14:2e:cf:74:b8:dd:20:76:d3:fb:6d:
         cd:6f:1b:83:c0:64:37:fc:f7:42:c7:e1:85:6b:83:e9:36:c9:
         e4:42:74:7d:ac:c8:62:fb:ae:d6:f3:35:82:01:f3:57:d0:67:
         5e:90:0f:f5:a6:f1:3f:d4:7e:82:ad:ac:6c:0c:1f:39:b9:af:
         98:59:2e:73:36:db:3b:79:28:b1:77:cf:b7:98:71:50:7a:04:
         a1:1d:d8:8e:72:4b:d0:6e:83:a0:d9:db:91:2f:84:cc:e1:99:
         ba:55:bf:b7:85:e9:01:76:d8:cd:86:aa:bf:2b:6f:d7:45:17:
         64:eb:7c:bc:17:ce:05:a8:3f:6f:2c:62:a4:37:ce:eb:1e:97:
         8a:d8:43:fe:ef:71:50:a7:fa:50:c5:bd:68:91:a0:80:e3:33:
         bd:94:03:61:66:90:64:ff:bd:14:a8:52:d4:df:8c:60:fd:f2:
         4f:02:e3:41:85:5e:d9:d2:b7:cd:e6:6d:03:81:2d:10:75:a1:
         e7:5b:4d:21:5f:b6:1a:79:fc:e6:93:ce:97:80:14:3b:47:fc:
         5c:e5:c9:87:f7:f4:73:3e:48:27:35:e5:90:32:55:08:50:57:
         88:f3:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:32:08 2025 by rpki-client