Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/e13066c3-422b-349c-8a79-3f74fcefb93b.roa
File:                     e13066c3-422b-349c-8a79-3f74fcefb93b.roa (raw, json)
Hash identifier:          XziktZtAPXDLm/CdYijAAx7didliU7ZMdRxX2/PZ/Zc=
Subject key identifier:   10:C9:BB:E9:A8:66:CE:9B:02:D4:8B:00:6B:EC:3F:F4:DA:D4:DB:A3
Certificate issuer:       /CN=4d541041-019c-4979-9880-aed5fbe0e9d6
Certificate serial:       010D0C9F4328584AE6BB961613039C8419D19300
Authority key identifier: C7:3F:51:5C:14:5A:F9:40:28:D1:53:48:D2:AC:49:3F:B1:94:15:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/e13066c3-422b-349c-8a79-3f74fcefb93b.roa
Signing time:             Mon 18 Aug 2025 21:14:39 +0000
ROA not before:           Mon 18 Aug 2025 21:14:39 +0000
ROA not after:            Sun 16 Nov 2025 22:14:39 +0000
asID:                     1089
IP address blocks:        2602:f784::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/4d541041-019c-4979-9880-aed5fbe0e9d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/4d541041-019c-4979-9880-aed5fbe0e9d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:bb:96:16:13:03:9c:84:19:d1:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d541041-019c-4979-9880-aed5fbe0e9d6
        Validity
            Not Before: Aug 18 21:14:39 2025 GMT
            Not After : Nov 16 22:14:39 2025 GMT
        Subject: CN=6cb8a6d7-c10a-4fd5-9966-865faa06a3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:82:66:fd:d7:77:0f:87:d0:76:43:7f:d1:4a:
                    9f:23:37:b2:ac:12:54:39:9c:c5:1c:07:ff:72:8c:
                    a7:50:62:a0:b7:4f:6e:68:9f:50:d6:06:2a:24:36:
                    29:bc:ff:7e:3b:ef:be:73:91:4a:8d:05:3c:23:5c:
                    dc:01:bd:9a:d3:fc:50:5a:07:5d:9b:25:17:ff:41:
                    b2:8a:2e:ff:7b:29:d1:c2:05:df:a4:0b:2d:9f:71:
                    d6:7d:1c:35:b0:4b:a5:64:48:22:df:5a:a5:a8:95:
                    0e:29:e5:78:a1:53:7b:29:1b:01:3b:e8:80:12:a6:
                    a4:e1:99:b3:3c:99:97:41:48:0c:09:c6:a0:42:4b:
                    7e:8f:81:1e:c1:54:5d:88:b4:4f:21:47:c0:e1:f2:
                    af:4c:eb:6d:a7:01:9b:1e:04:4e:47:c9:e3:ca:f5:
                    fb:81:d1:0a:1e:9e:50:a5:3e:8e:ad:78:a3:43:df:
                    7e:8e:e6:04:d2:e6:f3:0e:b5:fa:5e:57:00:2a:7e:
                    64:38:d7:5d:bc:7e:36:46:d5:19:33:59:59:e3:13:
                    c9:bd:ab:d2:fa:b7:26:6d:36:5b:94:06:85:4b:a1:
                    e3:71:fc:49:6c:4a:37:04:fd:11:e8:6e:ec:4c:1c:
                    77:e9:31:db:df:97:f2:ec:82:12:1c:0d:73:62:49:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:BB:E9:A8:66:CE:9B:02:D4:8B:00:6B:EC:3F:F4:DA:D4:DB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/e13066c3-422b-349c-8a79-3f74fcefb93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/4d541041-019c-4979-9880-aed5fbe0e9d6.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3F:51:5C:14:5A:F9:40:28:D1:53:48:D2:AC:49:3F:B1:94:15:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f784::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:81:f4:90:7b:d3:ae:94:83:71:44:7b:bb:ab:cd:30:f3:
         27:aa:0b:98:57:3f:72:9b:12:33:87:48:f1:27:f0:81:44:fc:
         ed:d9:f6:dc:f7:cf:61:d9:40:1d:fc:9d:c8:dd:83:b6:bf:28:
         98:4a:08:b3:2f:f1:e8:aa:64:72:5e:38:35:f1:3e:85:8e:c2:
         4e:7e:32:5d:31:4f:34:4f:5d:10:65:e0:f2:09:65:13:f9:df:
         c3:67:d6:04:d6:20:d7:5d:33:04:d0:f6:b2:95:60:5c:fc:6f:
         bc:c2:e6:fe:c8:dd:f5:d2:fd:c5:ea:db:ff:b3:38:01:bc:a9:
         35:73:e4:30:a0:fb:f2:1b:0c:46:6d:cb:67:de:3f:45:27:92:
         24:4a:82:74:d4:7d:40:1a:9c:07:ac:cb:97:5c:7a:e3:34:90:
         24:74:4d:12:b5:bc:4a:36:ee:58:0a:a5:e8:79:ef:be:9d:a2:
         23:84:61:68:6d:77:c1:33:a4:7c:7b:00:d8:9a:da:7d:b6:2b:
         8c:b7:9e:a8:60:72:10:d3:91:ff:c7:84:f9:6d:b6:35:12:b6:
         cf:bc:7c:dd:9a:bc:72:18:50:77:9a:27:66:2d:5e:78:67:da:
         30:04:8f:29:4f:79:e3:7f:a7:7d:49:38:67:97:f8:0e:65:20:
         4c:ee:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:46:37 2025 by rpki-client