Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
File:                     51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa (raw, json)
Hash identifier:          W9HMb2+uSTH/p4km7Vy9nKc7JI7aUQKfJDEk+dLWnjs=
Subject key identifier:   17:43:E3:A1:AD:A2:03:FB:BC:0A:BD:69:73:B3:DD:CC:B4:DA:D8:25
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F4328584A9FFB99E3FB79B3CCAEE32200
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     27398
IP address blocks:        2602:fed5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:99:e3:fb:79:b3:cc:ae:e3:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=9a4f92c8-3481-4b4e-a021-bdafc88d69b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:02:d0:f4:5b:e8:3c:37:ab:38:af:77:23:
                    00:e8:b1:8c:2f:c6:9a:0b:cd:be:2c:fa:6c:cc:28:
                    41:f4:77:4e:2b:52:7e:7b:a1:5b:f3:ef:bf:3f:6a:
                    8c:5b:39:59:77:0d:89:7d:9c:27:9f:e8:f5:95:ac:
                    8d:16:67:86:df:22:00:3b:93:a0:3c:f7:76:72:e4:
                    46:6a:5e:66:5d:7f:64:28:fb:af:17:24:61:cc:4d:
                    ea:1b:7e:d9:69:c4:34:b3:41:d0:9e:01:ee:86:c7:
                    ee:4a:f9:ea:1f:4b:36:07:c0:ab:2d:dc:c0:8e:56:
                    3d:cb:f1:f9:fc:c0:e3:36:84:05:ba:58:21:5f:e1:
                    ab:bd:53:3a:80:71:57:62:56:a1:64:8f:2f:c1:be:
                    2f:bd:b0:f9:11:fa:01:e6:0e:ec:1b:01:d3:e6:c2:
                    26:4c:87:93:fe:38:5c:fe:cb:d7:52:de:9c:82:f2:
                    a3:76:d2:6a:16:c9:e7:c4:e0:ae:94:af:b2:43:6f:
                    9c:61:ba:dd:ca:2c:d1:25:16:dc:72:e5:ac:2d:49:
                    aa:be:3e:92:b4:09:a9:f7:92:0d:cb:c2:64:24:fd:
                    ab:5e:10:97:a0:0c:64:82:5f:b0:2f:73:f5:2c:a3:
                    0e:a9:7f:13:cb:8e:b2:45:48:c1:10:7c:06:a2:10:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:E3:A1:AD:A2:03:FB:BC:0A:BD:69:73:B3:DD:CC:B4:DA:D8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:88:e1:b8:5b:64:44:48:df:0a:2a:5f:aa:f7:52:a0:6e:
         ec:7a:77:1d:a1:f4:3b:b1:62:5f:c2:05:a7:36:67:36:19:52:
         4e:fe:f7:fb:b4:9b:c0:42:1a:e2:0a:01:c2:c3:e7:19:f4:de:
         50:7f:75:74:76:a8:65:24:95:bc:7b:c8:e0:e1:c7:dd:1f:80:
         6f:b9:db:a2:a0:8e:92:f9:dc:cb:4b:52:ac:80:21:82:26:5e:
         e1:a2:b5:f0:25:79:dc:6f:4a:2d:23:e4:de:51:3f:5f:29:2e:
         5e:8a:41:18:8e:4c:06:23:f6:f8:c7:a3:c3:f6:1f:2e:8a:fe:
         bb:af:eb:f8:3c:5d:68:d1:7e:b9:11:de:63:08:3b:c1:da:21:
         49:13:7f:d1:00:cb:45:e4:c2:a2:07:90:fa:9e:5c:ad:17:e7:
         f2:10:7a:dd:17:bb:75:64:5a:f5:2b:33:1a:5c:63:96:e0:d1:
         54:8e:1a:95:0c:d3:72:c3:8f:8b:c8:13:e8:d6:09:2e:cc:71:
         08:15:ed:7b:2a:33:e9:08:20:73:e9:10:d1:a1:f1:ff:26:ee:
         78:63:9b:1f:e6:b9:27:af:e9:dc:85:1c:4d:34:b5:33:23:ce:
         be:9c:f2:8c:a9:36:e4:e5:a4:64:0d:ec:bf:4b:2c:6c:3c:d8:
         89:10:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:36 2025 by rpki-client