Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
File:                     f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa (raw, json)
Hash identifier:          zMVRbaUQczXkisLA9eaMWpONEe0H5fk7n9zP5btS6e0=
Subject key identifier:   B4:F5:FC:1D:2A:4C:B2:55:87:C9:3E:6C:00:F5:36:99:1A:AA:ED:D9
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A14655B445484A666BC985780
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5b:44:54:84:a6:66:bc:98:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=adedcc27-b7be-410e-858d-b58039e11483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:9e:57:b8:5c:bd:5b:01:dc:96:ed:09:83:
                    76:f2:d4:93:5c:d5:6e:60:8a:3a:12:48:cd:9c:53:
                    a9:68:33:db:00:ae:72:7e:1c:59:d5:41:f9:cf:be:
                    b7:b3:74:70:42:3d:94:2a:f1:18:4c:e5:68:1b:65:
                    77:c8:33:27:3f:7c:64:52:4c:62:b1:91:c1:02:d6:
                    14:d9:a0:fb:d4:32:43:29:1d:37:d7:c8:dd:39:22:
                    02:4b:06:d8:1f:a2:4c:48:d2:21:20:34:da:d8:fc:
                    50:ce:35:04:00:be:74:41:6c:e0:5f:a3:a0:24:7b:
                    f3:b6:61:39:e2:eb:ac:6e:a8:64:db:e8:76:2c:bf:
                    4e:de:14:9f:bf:15:62:18:fd:a8:7b:8a:ed:ab:71:
                    d7:6f:45:54:a1:f9:b3:dd:99:1b:14:85:47:5f:c5:
                    d4:5f:72:7e:cc:a1:04:75:ba:dd:32:ea:70:23:e7:
                    f4:ad:26:6f:e1:57:43:27:15:0e:a4:dc:1a:1a:a9:
                    99:e6:73:f4:31:6f:9e:f2:ed:b1:b1:51:68:ab:70:
                    66:57:85:b5:71:1f:9a:0a:b2:43:35:7a:e6:43:2b:
                    dc:17:80:1e:b8:a5:5d:1f:ac:71:69:d0:87:a5:64:
                    c7:5a:34:98:a3:fc:04:03:66:0f:90:e9:8c:b0:88:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F5:FC:1D:2A:4C:B2:55:87:C9:3E:6C:00:F5:36:99:1A:AA:ED:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:b5:32:2a:d0:25:b9:ce:de:5b:af:cf:f0:b1:6c:9b:e2:
         6f:7e:cd:a8:10:6f:d5:4c:1f:5f:98:ed:bc:ab:a6:67:5c:7b:
         1f:41:8f:f1:db:13:64:6b:d4:3a:73:94:35:b6:f0:ca:f2:f3:
         b0:19:f6:0d:b9:90:0a:7f:73:a8:ed:67:26:62:e0:41:88:35:
         85:8d:27:1e:bd:8a:84:04:bd:56:44:6d:b9:62:b2:af:75:60:
         c5:70:9a:11:41:0e:01:92:fc:ef:f9:f1:d6:00:70:4b:f8:fb:
         89:5e:88:93:e0:37:d6:c3:b1:64:70:9a:fd:8d:5f:8f:43:4b:
         80:fa:80:82:34:18:15:bc:0d:4c:ec:38:09:09:b3:5a:83:ac:
         ec:15:ef:a6:30:01:42:5d:27:b8:c4:b7:92:d2:5e:a6:75:54:
         c9:e4:b4:aa:f1:75:7f:f2:fc:12:65:bf:03:3b:8f:24:b6:80:
         ba:49:9f:87:d7:64:bd:77:e7:b8:c4:85:d5:a6:f1:7e:38:43:
         b1:c4:79:c4:5f:62:c9:b8:3b:8a:b0:62:b1:ab:7e:bb:e3:59:
         a9:98:75:e1:a3:d4:02:80:cf:d3:b3:2d:0b:e9:5b:2c:3e:df:
         67:eb:5c:52:6a:ab:2f:13:9f:cf:af:e4:10:ac:60:7b:fd:3c:
         e1:7c:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:09 2025 by rpki-client