Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
File:                     3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json)
Hash identifier:          mhmm1GyKe/cf2w5qEpwckc/9VG+myTSqdTMPQo2CVgw=
Subject key identifier:   C0:92:EB:E6:4B:F0:BC:B3:1D:4E:4B:12:72:48:FD:A2:FA:CD:A7:E9
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A146563A114814225CB460C00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:63:a1:14:81:42:25:cb:46:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=4612f5bc-7511-40ea-85c6-9504dacb3c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:49:06:d8:7d:d2:6e:20:f5:70:d1:8c:de:
                    83:85:d3:05:35:44:a5:29:2e:79:f0:54:da:92:f6:
                    3d:4f:66:61:7f:3c:6b:df:d7:f2:b4:c6:43:cd:7d:
                    1d:7c:8f:15:33:06:16:02:93:fc:41:43:c4:cf:77:
                    b2:0b:28:74:06:6a:1e:d2:47:2e:89:d0:69:ec:80:
                    7f:b4:f9:96:5a:e1:92:5a:ee:a9:e3:9c:82:d5:e6:
                    39:d6:30:36:02:90:0b:5f:1e:4c:da:b9:60:e7:09:
                    18:8b:9f:0e:f4:aa:aa:a9:93:d0:e1:a7:aa:8f:11:
                    30:0d:64:a0:6e:91:75:be:9c:8a:7e:15:54:e4:50:
                    77:a8:10:35:4d:ad:fd:e2:18:73:34:ce:1b:55:89:
                    ab:52:6e:31:a0:45:86:18:cb:98:1e:50:71:27:c1:
                    7b:d9:c5:04:63:22:3b:8a:17:92:06:04:f4:b6:9c:
                    ed:5b:35:a4:46:40:14:91:d0:9f:50:31:64:5b:2d:
                    a5:e3:fe:9d:6b:ad:73:da:1e:f3:cb:08:13:ba:0b:
                    e1:30:43:76:3a:28:69:e8:29:33:26:67:78:29:5a:
                    4f:fe:e0:e8:c5:20:fd:cf:b0:e6:d1:ef:d9:d1:c6:
                    5a:e8:78:df:c0:e6:bc:f6:87:02:ee:6b:61:76:df:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:EB:E6:4B:F0:BC:B3:1D:4E:4B:12:72:48:FD:A2:FA:CD:A7:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:c4:e1:8c:0c:aa:f8:71:7a:43:5c:1e:ba:74:9d:82:71:
         37:5c:a0:a1:0f:d8:96:45:ea:1c:b2:bf:a1:3f:68:93:6f:3a:
         78:85:c5:b5:22:5c:83:ad:13:44:42:19:9f:84:12:d5:90:6f:
         78:ec:7b:65:63:27:87:0d:3d:fa:c9:1b:e2:0f:b9:5f:8a:57:
         94:7e:bc:81:2f:21:2d:74:2f:d0:41:84:1d:9a:88:10:74:d7:
         54:56:26:e5:8f:84:69:01:47:17:9f:94:8a:19:e3:bd:59:79:
         96:86:15:af:de:e4:7d:ed:e3:78:f7:40:84:a5:12:54:f7:98:
         ab:aa:59:05:e9:f5:84:b9:9d:d4:f7:4d:01:50:3d:4e:13:9d:
         4d:52:3c:22:91:f0:ce:21:c4:1a:7b:e2:6f:8a:e1:2f:a9:cc:
         b5:42:ca:18:e8:bf:f2:a1:5f:9e:85:12:b2:21:b3:33:4d:fa:
         39:ab:6c:30:36:ed:9b:83:31:f6:af:cc:ce:73:47:d0:8d:57:
         8a:61:d6:12:5a:9d:70:4e:64:c2:ad:22:be:9f:98:9e:5d:1d:
         bb:d5:9e:99:d9:be:e9:67:ee:18:e8:42:63:e1:98:0e:d3:2f:
         d5:55:c3:e1:d6:f3:74:2e:87:52:a2:47:02:62:ae:85:58:37:
         3e:4b:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:52:41 2025 by rpki-client