Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa
File:                     f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa (raw, json)
Hash identifier:          hBKYRiN35Jt6ttyEmRFVQLPtmN/Z+9w3G3wA/xJ7RdI=
Subject key identifier:   31:0E:B4:F1:A8:5C:47:6F:89:A5:19:0E:9F:89:6F:A8:F5:B9:CD:7B
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A146559F9A0E1037213CFA700
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:59:f9:a0:e1:03:72:13:cf:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=d8f162c4-6c6c-44a8-a1ca-1d9e4629a252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:1d:8a:b3:0d:71:e9:8f:8b:0c:74:5f:44:
                    10:5f:28:6d:53:cd:ee:6c:89:10:c1:11:6a:ae:30:
                    c1:28:49:69:b0:0b:2d:be:8d:16:9c:09:ab:3a:e2:
                    f8:44:72:c7:d0:85:ea:3b:2e:35:98:2a:63:8c:a8:
                    5e:35:53:3c:2b:d4:80:1f:ff:cf:87:7f:89:24:13:
                    a2:e4:8d:5e:12:45:4a:2f:53:a2:88:ec:b8:d7:29:
                    3c:94:3b:3d:e1:98:22:0a:98:15:9a:f3:2c:03:a5:
                    4c:fc:c4:4f:eb:2b:a7:fd:f6:13:7d:f8:00:23:c1:
                    f9:a7:70:20:b1:9e:a9:1d:55:21:cc:19:d2:0f:2a:
                    a6:d4:fb:53:6f:20:52:43:71:18:02:33:b1:97:5b:
                    dc:59:69:93:d7:c4:84:80:4d:e7:82:c0:93:a7:a0:
                    a3:25:1b:e6:5f:a5:47:c8:a5:37:c9:a8:0e:55:9a:
                    bf:66:9e:10:7c:bc:bb:6b:58:f4:d5:cb:df:d9:d7:
                    0d:22:62:b6:ae:86:db:e0:dd:c0:a8:79:a8:43:7f:
                    a8:ba:25:95:49:cf:99:f4:fc:75:fc:7e:76:5a:68:
                    3d:3b:a6:79:9b:79:ac:8a:5a:86:ba:6e:cc:ca:fb:
                    f2:a1:04:a4:e0:f7:54:cc:05:6e:24:75:df:db:2d:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:B4:F1:A8:5C:47:6F:89:A5:19:0E:9F:89:6F:A8:F5:B9:CD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f4cbeba0-6a5e-36b6-80ee-5c2b7ca1e401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:74:3d:9e:4f:15:2a:d3:52:2d:aa:37:22:1e:81:9a:9e:
         b9:0b:f9:13:4e:76:cb:ca:0b:3e:1e:99:69:80:d7:99:90:59:
         17:cf:db:f0:19:62:8d:6a:80:c9:5c:70:fe:c7:61:86:e7:95:
         a1:32:94:af:dd:d2:5f:55:da:32:47:d1:9e:75:ca:8f:07:96:
         d1:f7:48:63:22:ca:c0:a2:05:d3:97:bf:cb:d2:7b:77:f0:50:
         17:4e:2b:68:cd:f2:72:42:66:67:a1:66:f7:34:48:d3:38:73:
         4c:d9:2f:6f:a4:d5:7d:bb:60:ea:cc:41:d6:19:9c:8d:7d:5a:
         e0:3f:b0:de:4e:8b:bd:05:04:8b:f5:3f:39:45:1a:f0:09:52:
         e6:f6:26:a7:93:57:da:a8:d4:95:28:12:3c:4e:51:00:bb:e4:
         b9:dc:a3:3e:f0:b5:24:5a:b3:22:61:32:01:d3:8f:6d:12:b6:
         da:0c:34:71:f3:c9:3d:20:6f:c6:dd:06:fc:84:1e:cd:b1:dc:
         23:00:b7:e0:87:58:10:91:c6:6a:83:49:96:b5:a2:41:d6:5a:
         97:f3:46:d6:23:6f:20:0b:35:31:31:d0:9a:ad:55:75:8e:0d:
         2d:33:1b:47:74:32:c9:83:44:ab:27:bc:e4:41:2f:c8:da:f6:
         7c:e2:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:23 2025 by rpki-client