Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa
File:                     49158061-73a5-3e35-8fc0-77a11062d181.roa (raw, json)
Hash identifier:          4kwpfheMx7VTdkRj/8DqyWkokNIqUpumtyqJIhaRcl4=
Subject key identifier:   85:7F:D3:8B:D2:BE:B6:AE:7D:A1:5F:32:1B:F6:7C:F2:D3:08:9D:2C
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584A90A0C658ADBC8ECCE1F0B480
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2605:b040:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c6:58:ad:bc:8e:cc:e1:f0:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=73b8f667-66dc-4d9e-9571-de1d25723325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:06:e1:4a:d0:8f:8c:cd:15:c8:ec:13:9f:ed:
                    34:e8:18:6b:79:e2:a5:f4:76:6a:f5:6a:a2:84:82:
                    c5:9e:3e:09:d7:39:10:0b:7d:35:b5:8f:ac:37:74:
                    67:a9:af:c4:90:2c:01:f6:fb:25:e7:13:73:37:b3:
                    82:d3:ad:74:e3:09:25:e3:79:39:bb:4d:34:30:02:
                    f4:c9:0f:f9:11:f3:60:5b:b2:cb:e9:ac:73:14:bd:
                    f0:c8:10:bb:03:54:1b:70:57:cf:38:c9:61:98:b7:
                    30:7a:ef:cc:87:e9:dc:0e:d9:e8:98:a5:c8:94:32:
                    bb:2b:58:30:1f:fb:68:12:be:ba:5e:34:53:83:9f:
                    85:af:68:59:b5:d8:9f:19:bc:1d:d9:49:64:9d:47:
                    41:36:20:45:49:91:06:17:92:08:00:e8:37:0d:65:
                    11:eb:2d:4d:29:31:85:82:5a:2c:13:57:53:1c:00:
                    c5:68:b0:e5:d7:af:f3:b2:7f:e1:f9:19:20:7a:bf:
                    96:a6:2d:8a:32:f4:8f:49:b7:93:45:55:01:6e:70:
                    47:66:fd:47:fd:29:ab:ec:f2:90:d2:59:55:9a:8b:
                    e2:3c:6b:ca:cd:92:8d:0c:a4:be:16:02:84:6c:4c:
                    e6:c9:68:b4:83:5b:f9:ed:34:fc:b7:02:39:52:ea:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7F:D3:8B:D2:BE:B6:AE:7D:A1:5F:32:1B:F6:7C:F2:D3:08:9D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:65:7f:15:12:70:93:e8:5e:62:3a:d3:bd:4b:0f:92:cc:
         79:8b:a2:df:54:48:d3:0f:7b:03:23:9c:bb:3b:5e:42:f7:da:
         9b:4c:a7:29:20:04:0e:7d:85:19:a4:7a:c7:72:7e:3e:1d:5b:
         b5:21:3e:a5:a1:01:fe:da:fd:ab:6b:e0:b3:96:4e:61:62:22:
         69:f4:6e:c5:cc:fd:e7:f1:97:14:e9:5b:41:e9:43:72:fa:be:
         f4:d6:cd:14:2a:ca:95:f2:a0:67:9d:f2:d1:08:fc:e9:48:7c:
         45:af:a4:30:03:02:6e:a3:20:10:48:6b:0c:f9:f8:dc:0d:46:
         4b:2d:3a:4d:8f:c0:2a:8f:c2:a4:55:71:7c:06:96:cb:78:66:
         61:64:fc:9a:dd:f6:28:05:e7:40:7e:7b:b8:0d:5f:1c:d2:d4:
         e7:e7:9d:d7:ba:92:f2:ad:b9:40:93:a0:e6:31:d1:34:d2:f6:
         cd:69:ac:31:60:a8:d8:d0:3f:8b:bf:fb:55:e0:67:c9:ee:5d:
         03:c9:d3:3f:2f:fb:c7:de:3f:61:f4:17:ca:58:84:ee:0d:2b:
         e0:ec:d8:69:12:fc:8a:e0:d5:b2:67:b6:5b:3f:62:f3:86:f7:
         ff:5c:c6:e0:a2:f1:d7:8e:08:96:87:0f:27:a1:af:3a:60:5d:
         52:a5:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:25 2025 by rpki-client