Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
File:                     63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa (raw, json)
Hash identifier:          gJ0ykKPiw+D4u6MxtyGLyVBImQ78G2Xjf3lbvCOKQ6Q=
Subject key identifier:   EC:EA:86:43:44:3B:11:C6:85:47:92:51:4E:C9:50:50:5A:EF:91:65
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584AADF11FFBC3F3564BD4626020
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     13638
IP address blocks:        2606:5100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1f:fb:c3:f3:56:4b:d4:62:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=bd175dbf-a3cb-463e-80be-c90db0d62346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:af:83:e3:50:05:29:d7:2e:8b:d7:1f:39:
                    57:cf:3d:ca:ae:c0:12:6f:88:b1:35:15:60:a4:64:
                    41:8a:16:cf:6e:fe:ad:79:71:73:8b:99:9e:5d:2d:
                    66:fa:23:16:07:65:1f:57:3e:50:5d:c5:3c:2a:db:
                    d8:13:73:ed:c1:94:91:02:a8:14:80:a5:a9:18:8b:
                    8e:a4:4d:26:22:9a:d3:73:06:59:12:75:d3:95:df:
                    88:bf:56:72:28:b2:b5:48:e7:ea:ac:98:59:cf:87:
                    a9:1e:dc:ca:05:e8:4e:77:90:93:ad:0b:43:ed:a3:
                    8a:dc:1c:3e:29:1f:ba:b2:ef:7d:3d:38:fc:5c:b8:
                    37:2f:81:ec:33:77:0c:d4:67:56:d2:c7:7f:28:27:
                    78:70:02:19:91:c9:13:cc:f4:4d:0b:07:bd:68:43:
                    2c:ef:1e:be:1d:e4:23:a2:28:b3:14:65:34:ea:62:
                    1a:84:14:64:80:05:dc:c4:f0:e0:bc:55:1d:61:50:
                    5d:55:39:d1:f7:6d:49:e4:17:a7:3b:87:96:c0:38:
                    e4:75:af:6c:a9:0b:ff:79:43:f0:99:87:7e:55:40:
                    be:73:a9:2a:6f:bd:8e:fe:13:53:26:4c:4f:10:a6:
                    ef:fc:72:cd:c1:86:a6:6f:f7:21:2e:3c:24:8b:2a:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:86:43:44:3B:11:C6:85:47:92:51:4E:C9:50:50:5A:EF:91:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:bc:2f:b7:d5:a0:36:e0:a8:75:d0:97:f8:fe:2a:fd:f0:
         2c:1e:5e:ed:f1:e3:6e:ee:75:55:20:c4:8e:66:d7:28:a8:03:
         11:a1:38:8b:31:02:c2:cc:42:df:63:e4:87:36:ff:6e:bf:1f:
         67:8d:15:82:fa:f8:21:a1:d4:b9:44:f8:fa:2a:89:29:a2:b5:
         79:3c:73:ce:99:ec:bf:9d:4b:3a:53:16:8d:6d:7e:ba:31:fe:
         19:03:ae:a1:7e:6a:23:94:5f:3d:b1:09:13:45:51:e3:03:a0:
         cf:34:1d:d4:da:14:7c:24:b9:4a:5e:83:12:27:ad:3a:27:56:
         9f:5f:7a:8e:a4:45:c4:dc:da:f1:ca:02:89:4f:4d:a5:9d:43:
         96:30:72:11:59:70:a0:dc:89:eb:b6:39:30:c1:c9:2a:f8:bf:
         e5:70:71:00:6b:1d:9d:b1:d9:b6:8b:c5:c1:53:d1:d0:32:71:
         1f:a5:ae:74:a8:85:bd:13:c0:99:c3:7f:bd:26:4c:3c:3b:db:
         b5:01:59:c8:49:54:bc:98:41:24:1c:7c:b3:77:8f:f1:be:0b:
         5e:7e:d0:15:3c:e4:1c:e1:0d:ba:e5:76:b1:9d:08:92:bb:e0:
         04:8b:2e:39:72:1d:54:07:f9:ed:e5:00:45:1d:9c:d7:e9:8e:
         c0:bf:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:49:12 2025 by rpki-client