Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/58c95c6e-b60c-33a8-8ada-36eecc810697.roa
File:                     58c95c6e-b60c-33a8-8ada-36eecc810697.roa (raw, json)
Hash identifier:          ta4sByecbZV2kxzhzidu1s6XDNH+Lj1rjmOQcR+zGkM=
Subject key identifier:   D7:A6:22:67:47:2B:EA:34:3C:9A:2D:28:CF:B3:54:A7:93:62:9D:42
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A6C55D2C4A89A03F9D098C000
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/58c95c6e-b60c-33a8-8ada-36eecc810697.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     398355
IP address blocks:        2605:6400:d814::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d2:c4:a8:9a:03:f9:d0:98:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=2b7a0fc1-a4df-4c59-bfb4-db871d6fd167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:f5:b0:89:70:c5:ee:8d:63:f7:81:30:57:
                    37:f5:85:70:61:88:4c:67:ca:a4:ba:20:40:50:7c:
                    da:7c:6b:fc:c5:1c:c0:87:85:67:eb:ca:8e:00:d1:
                    23:fb:50:70:31:01:f4:c6:02:3e:29:98:91:79:d0:
                    c8:3e:ed:61:d8:7f:a6:37:74:a3:c5:98:55:60:80:
                    90:c3:78:73:ce:b7:83:40:35:bf:83:97:45:76:f8:
                    c3:ab:ec:cb:55:8a:7b:c9:9f:21:f7:80:7d:d7:53:
                    b9:67:aa:56:ba:a9:a2:68:4e:49:94:1d:ce:24:0d:
                    59:11:51:26:5f:aa:25:a2:bb:5a:e7:7c:30:78:30:
                    5f:23:f1:fc:16:ab:e1:e1:7a:1c:5b:2b:bd:84:d7:
                    06:99:a1:cc:3b:58:78:9a:f2:d9:dd:a4:e8:df:07:
                    7b:16:34:77:af:70:eb:51:f7:64:4e:1c:61:58:0a:
                    09:aa:f8:b0:1e:0c:47:68:4e:b1:89:31:d3:ed:6f:
                    85:8b:f8:cc:7e:c6:a7:a1:ae:44:f6:64:e7:58:5e:
                    79:f3:47:2a:16:93:ca:3c:a8:4f:df:4b:0d:1c:6b:
                    ed:f4:44:0b:aa:d6:23:6d:cc:08:40:c8:0a:4f:e5:
                    5c:e3:a8:32:90:65:42:3f:cc:0d:67:a0:46:97:9a:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:22:67:47:2B:EA:34:3C:9A:2D:28:CF:B3:54:A7:93:62:9D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/58c95c6e-b60c-33a8-8ada-36eecc810697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6400:d814::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:e9:b2:4e:f3:9c:96:2d:04:60:16:7c:b4:16:e7:74:17:
         88:2a:ff:72:67:df:ab:a4:80:9c:fc:7c:09:c2:08:0c:10:5e:
         da:87:35:61:05:f7:88:1b:73:7d:b0:46:1a:65:c2:b0:72:50:
         03:65:84:1e:c9:69:3b:3d:08:9c:a4:bf:9f:1b:42:07:f9:32:
         28:87:fe:f3:28:10:d7:78:0a:1b:45:73:b5:b9:5a:05:40:8d:
         5c:0e:98:ee:df:a8:f4:ad:0a:4a:e6:78:34:6e:20:f0:a3:b5:
         3a:3f:c5:38:02:22:dc:8e:0d:5f:da:6d:75:1c:6d:62:72:8a:
         26:f2:f6:89:07:bb:70:0c:83:8c:bd:a9:86:6d:1e:88:fa:25:
         9f:3b:a6:4e:a8:97:69:90:ce:a1:3d:f1:d9:7a:9b:25:63:ff:
         30:d0:42:a4:d4:ba:71:8f:99:e1:3e:ba:41:80:7c:32:8f:25:
         d8:40:db:42:a0:89:c6:5e:d0:47:69:10:f7:81:a3:23:c2:c7:
         4f:fd:8c:29:49:7f:25:eb:0c:8d:1f:c0:30:f3:cd:f6:d2:83:
         9c:57:18:d3:ca:f0:5e:dd:0a:bc:57:9f:f7:83:f1:7e:15:21:
         b8:52:af:d3:dc:f2:d4:e6:e5:26:bc:00:24:1c:66:4e:4c:19:
         76:81:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 22:56:08 2025 by rpki-client