Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa
File:                     be8002dd-9cf0-381d-8e61-bf0f66901598.roa (raw, json)
Hash identifier:          T111J2Sd0erEV2j/cHzlIGyV6P+ko/fCkO/JqB5rkQc=
Subject key identifier:   F6:CB:9A:AA:8E:5F:A1:F8:F8:51:84:68:05:B7:7C:AB:FE:F6:AE:26
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AB220C2A265AE1E4888721800
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     396955
IP address blocks:        2001:468:c07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c2:a2:65:ae:1e:48:88:72:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=51e534d4-e39b-4679-84ea-5521070a1c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:ff:9d:83:79:9d:9a:5e:23:de:7b:43:4d:
                    d3:0c:88:50:2b:61:c8:5f:7d:c0:85:2e:29:c1:8c:
                    b7:a8:6d:37:2f:c8:19:2f:49:d0:c6:21:bc:ee:2b:
                    15:69:15:a4:ca:16:79:77:cf:b8:67:9a:e2:e3:da:
                    60:4e:ae:4d:6e:d4:f5:0d:c3:0f:b2:b2:64:53:7f:
                    29:8b:63:0f:a8:4a:b5:e8:61:42:2b:b8:1d:21:ea:
                    f5:bb:f7:bf:c1:cf:08:87:5b:b9:05:a0:82:bc:ef:
                    b5:65:ea:b5:65:9e:4e:fc:00:32:a9:c7:30:32:72:
                    35:c9:c1:cf:9c:e7:d0:0b:a0:50:4a:74:e9:57:47:
                    e7:eb:81:eb:16:a4:f5:00:0b:ff:66:04:d2:ba:e6:
                    0d:3c:65:80:30:1f:60:61:32:d2:84:ea:e9:31:b5:
                    ce:37:5e:3a:c6:61:c6:55:43:b5:55:8b:57:e3:b8:
                    ab:ac:ff:54:6e:ef:e9:76:ce:9a:6e:68:59:11:15:
                    e6:77:ad:bb:1e:87:ec:c2:7c:3c:a3:69:2e:6b:65:
                    3b:3c:19:55:d3:83:39:a5:54:ea:47:86:9c:90:cf:
                    f3:a6:e4:8d:8d:5e:0b:8f:9a:ce:02:e5:28:2b:73:
                    04:ce:db:af:7d:13:33:aa:bb:2e:9e:e0:5a:02:04:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:9A:AA:8E:5F:A1:F8:F8:51:84:68:05:B7:7C:AB:FE:F6:AE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be8002dd-9cf0-381d-8e61-bf0f66901598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:c07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1c:50:f4:cd:6c:4b:9a:e9:30:88:9b:f6:49:27:4d:e1:10:
         4f:5d:a1:4e:b8:fc:c5:a0:a3:02:a0:8d:f6:2c:a9:dd:a5:b2:
         28:a8:ca:3b:c6:79:f9:fd:08:a6:83:8c:3b:d8:74:7c:39:bb:
         00:14:a0:a9:0b:95:9e:69:26:48:bc:d3:77:d6:d1:d3:0b:5a:
         d4:05:08:f0:c3:3f:6f:d6:c3:e3:c3:e8:c4:5e:72:a2:71:c4:
         e4:95:84:46:5f:13:8d:bd:95:2f:8e:60:1a:bc:81:82:48:12:
         e5:65:56:c5:8b:2c:86:2e:e6:2a:3e:85:22:4c:9f:b7:65:78:
         ab:2d:e6:67:06:df:35:73:43:5f:cb:24:5f:89:96:8b:73:13:
         76:10:bf:be:a3:9d:25:59:34:0d:dd:9b:76:eb:e4:a8:c8:d2:
         67:25:27:58:f8:95:89:85:da:8c:42:46:52:47:10:34:d3:b1:
         00:73:c2:ab:18:2a:28:f9:0d:2e:ad:b8:89:10:40:8d:a2:dc:
         94:51:6f:a7:b1:47:10:dd:d4:c0:9d:2f:61:8e:95:65:77:25:
         24:76:2d:06:31:cb:1e:a9:32:dd:88:8b:f9:f2:a3:08:0e:ad:
         1f:1e:92:cb:a0:77:6e:cd:85:ab:70:27:6c:63:98:86:c3:e7:
         2d:4f:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:16 2025 by rpki-client