Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
File:                     ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa (raw, json)
Hash identifier:          dXzNDHbG1/lxuxzysiJh64q9sllPnuqVutOrY3txuT4=
Subject key identifier:   9E:7F:E0:93:DD:A1:C1:A8:0C:13:BB:35:EF:9F:69:3B:A7:FC:84:C2
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584A1F901810D5F9796CC9594D80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     45396
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:18:10:d5:f9:79:6c:c9:59:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=fd84b52e-77d3-4c97-9aeb-e3cc2a4b6c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:7b:fc:93:55:c3:24:dd:61:be:1f:30:ad:
                    04:b5:5e:19:e8:bf:d9:12:aa:a0:c5:8d:fc:b1:62:
                    e2:48:33:55:7a:12:26:d1:3c:cd:80:d8:39:e5:ce:
                    e7:df:22:33:60:7a:a1:db:85:3d:6d:cf:c1:a0:1a:
                    af:d8:d1:48:7d:60:ce:21:e4:a2:cc:4d:54:c0:87:
                    37:c0:db:df:26:a9:59:db:b4:42:bb:b3:08:49:a8:
                    16:ec:c9:4b:6d:d6:36:64:bc:2f:11:d8:da:66:86:
                    a4:f7:fd:44:14:de:fe:c7:0e:12:12:76:c1:91:05:
                    be:61:dd:57:8f:eb:5b:20:f4:4e:0b:6f:18:cd:6e:
                    75:ec:b7:a7:95:48:0e:f0:76:52:ee:01:ba:80:b5:
                    f5:5d:47:99:2b:31:b7:52:47:c5:b6:83:2a:b4:c1:
                    4f:54:44:71:6b:13:9d:e2:19:9d:ad:d8:26:54:de:
                    c2:c4:6b:a3:71:ab:fd:a3:a1:ff:a8:de:eb:3f:96:
                    92:bd:dc:f4:05:c3:b1:b5:56:a8:24:f5:1f:56:d5:
                    7f:7c:58:de:6c:ad:d3:fd:49:d3:c5:bd:f5:b5:35:
                    6a:d0:32:05:26:5c:04:9c:d1:28:10:9f:e5:7f:51:
                    b0:20:49:fe:1c:23:8a:a2:7f:02:bb:57:a7:77:25:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:E0:93:DD:A1:C1:A8:0C:13:BB:35:EF:9F:69:3B:A7:FC:84:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:30:3d:03:e4:5d:5f:7c:12:6b:87:ff:68:c5:4f:c9:cc:92:
         db:3b:19:74:03:7e:0f:0b:c5:9b:a6:40:6e:05:74:e7:a8:e2:
         13:9e:17:82:3b:f4:92:42:d9:ce:9f:55:81:14:12:a7:75:ec:
         29:6c:17:3c:ab:a8:1b:b2:46:c9:90:5a:ea:ed:a7:08:0a:d1:
         a0:dd:2f:91:09:ed:0c:ad:67:07:29:4f:5b:90:8f:74:16:2d:
         54:09:c8:92:fc:6a:15:74:9d:d0:34:59:ce:fc:62:85:f3:ff:
         e6:95:f6:49:11:57:8f:f6:48:7b:00:ba:a4:d5:bc:d5:3e:38:
         66:7a:76:10:70:2b:a2:18:b4:c4:45:b8:94:95:6f:27:26:4b:
         78:01:b0:80:72:8e:eb:38:8c:c9:1c:09:9a:e2:f8:a8:34:29:
         cf:b1:fc:f9:37:69:72:24:37:05:95:4d:e1:17:7a:89:ae:e5:
         ae:c6:1e:e9:aa:69:e4:01:1e:5e:08:85:dc:26:b7:5a:66:96:
         a6:1e:14:9b:88:d7:f7:5f:78:76:77:e8:7f:45:dc:77:f0:37:
         18:07:df:82:61:a0:8a:8b:7c:b0:11:e2:41:80:e4:17:98:17:
         ed:0b:95:b0:63:2b:39:24:ca:cc:68:37:c6:6a:08:7b:3c:d6:
         d8:9e:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:33 2025 by rpki-client