Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
File:                     4c18c32c-4fa7-379d-9727-30aca7836cff.roa (raw, json)
Hash identifier:          Kdh3GQLSY+ebiNpyvJxrWjHbVgfKZlQHGpyEQMS1sv0=
Subject key identifier:   73:CD:61:D4:B4:E5:A2:72:09:63:4F:7A:F0:41:3E:75:8D:67:82:49
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A14655C1A6FC388E40CC56900
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5c:1a:6f:c3:88:e4:0c:c5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=5179808c-49cc-4f36-85fd-41f970845d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:ec:91:39:b5:8e:2d:b5:22:78:d2:73:96:
                    eb:0a:66:41:a9:7f:a7:bc:e0:55:03:d0:ae:c4:dd:
                    d4:c5:c5:52:b2:ba:71:24:b0:2f:d6:51:e0:b0:45:
                    fa:9c:6a:f4:59:44:3a:af:31:a0:4d:81:75:ed:b7:
                    b8:cd:12:28:32:0c:2b:69:49:d5:64:86:cd:ef:03:
                    b1:f5:80:bf:82:a9:6a:94:73:cc:90:fd:44:c7:f1:
                    73:cc:d1:b9:46:c0:20:56:3c:35:0b:05:c4:d2:b6:
                    ce:5b:63:28:23:53:7c:f6:48:42:90:c2:27:0d:55:
                    7f:13:e0:2b:9d:67:7d:c0:32:7a:d0:56:a4:99:a9:
                    cf:02:7d:c3:12:04:22:82:bf:1d:66:6e:a7:ad:4f:
                    53:62:16:bf:07:8f:2a:14:67:d8:de:a4:9a:52:db:
                    d0:9c:29:15:6e:4b:66:61:f8:fc:ee:62:6f:82:ee:
                    a9:8b:5a:c5:81:6b:8a:b1:95:67:3d:ed:46:c9:c4:
                    ba:ab:3e:54:3e:6e:e1:dd:0f:e5:ff:df:34:4a:bc:
                    a6:e9:3a:b7:cf:0c:a6:61:39:8a:18:3c:0b:ae:0d:
                    d7:7a:56:de:47:7f:e2:c2:13:c2:05:17:2a:35:f9:
                    8c:2b:97:06:73:ca:85:16:57:a0:a0:ee:ea:02:35:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:61:D4:B4:E5:A2:72:09:63:4F:7A:F0:41:3E:75:8D:67:82:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1061::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:ca:bb:46:60:0e:26:d6:2d:2b:1b:f4:49:67:78:a5:90:
         9e:fa:70:f4:3a:13:b6:66:01:91:16:eb:3c:16:87:5d:1f:18:
         7e:40:b4:b9:f3:48:1e:32:dd:2f:ac:a4:fa:c4:f4:ec:00:b1:
         0f:a3:ee:b5:42:5a:10:da:90:c6:3b:97:63:9a:21:55:52:96:
         fc:33:ec:20:cd:59:16:58:b8:f4:b3:69:53:47:45:d7:9e:4b:
         07:90:d4:28:33:7e:48:f8:ba:2c:2e:24:57:5b:67:21:f2:dc:
         c9:c8:10:21:86:36:15:5b:60:25:93:b4:fc:a6:91:82:d4:5d:
         72:57:f7:93:72:c4:d6:3d:a3:a4:f2:bb:f7:b5:41:01:78:28:
         ae:36:11:c2:8e:1a:d9:de:c0:c8:c1:71:16:a9:94:d7:16:6e:
         df:c8:94:d7:19:46:6b:a1:ee:93:d3:12:d8:3b:be:42:4c:52:
         51:4e:69:6c:29:43:e2:85:15:af:cc:82:b8:4c:08:7b:3a:99:
         89:eb:5d:f0:08:22:d2:a7:44:16:3f:17:7d:d1:0d:a8:12:77:
         a1:7f:d4:f0:45:af:ef:5f:85:a3:64:a7:8f:8b:4a:a6:a2:63:
         64:82:ee:0c:d9:1b:5b:8c:21:b9:92:03:6e:fa:05:ad:a9:13:
         06:cf:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:58:22 2025 by rpki-client