Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
File:                     f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa (raw, json)
Hash identifier:          n3tEXsSEbVlH8xKqt08ENRiZGjeuh0Xmu/u0obCuZOg=
Subject key identifier:   5F:1C:1B:99:80:A1:51:19:29:D9:97:EE:30:92:A7:A1:EC:64:7A:28
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F4328584AAB265E708E62B00F3D581740
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     23470
IP address blocks:        2602:fc2f:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5e:70:8e:62:b0:0f:3d:58:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=4b2f5f6f-8a54-4c79-b376-fd4254c88cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:4e:7c:4f:6d:b5:39:b6:a0:36:b0:2f:d2:
                    d7:7c:c7:6d:11:a6:4b:5f:39:b7:8e:fc:50:2e:f5:
                    59:e8:9f:aa:45:36:4c:07:ae:19:16:f1:4f:87:12:
                    aa:1b:05:43:1d:45:79:f1:eb:b8:4a:04:dd:99:38:
                    d3:16:89:f1:4a:24:b3:46:fb:2d:43:ac:ce:c3:8d:
                    3f:f8:c6:a0:86:cd:77:35:a1:fe:4f:5c:1e:6f:26:
                    c0:60:b9:36:f9:b0:f2:12:48:34:de:a8:f5:14:22:
                    a2:45:df:4b:f4:08:ad:63:3a:1b:ce:24:07:25:1b:
                    bf:b4:32:6a:b3:37:e3:9e:47:07:8d:97:ba:b9:39:
                    4e:4a:28:66:9f:2c:b3:bb:22:36:32:e1:63:82:14:
                    a8:fc:51:ae:3d:5d:9b:1e:3a:05:44:bc:9e:d1:0a:
                    55:1d:6c:fd:c5:e5:8d:e7:b4:29:cb:dc:a4:83:96:
                    29:71:12:4d:3f:f9:af:66:60:77:e2:3d:46:cf:82:
                    e0:2b:55:2f:e8:2f:93:5f:c4:a3:65:f4:80:02:b8:
                    56:f8:69:5b:7b:98:d4:89:10:f9:ca:e3:b2:36:45:
                    08:21:d5:fe:41:f6:c4:d4:ab:1d:80:b7:11:44:6c:
                    31:14:6b:1d:df:bd:fb:f4:4c:38:ca:94:8a:f7:e1:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1C:1B:99:80:A1:51:19:29:D9:97:EE:30:92:A7:A1:EC:64:7A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:26:f7:f5:3b:e0:16:9d:63:a7:2b:97:2b:4e:33:b1:a6:
         9c:e8:55:cb:14:be:a7:7f:f9:a2:0d:f2:25:01:9a:be:9b:0d:
         56:fd:1f:46:e7:c0:cf:23:25:f6:b3:b4:e9:70:f7:cd:d6:81:
         67:08:87:08:9b:5a:5e:80:70:5d:d8:5a:b0:5f:e6:2e:1d:bf:
         44:3e:94:ea:09:2d:0e:95:07:8c:14:43:af:73:7a:2b:29:11:
         08:d6:1b:b1:e9:12:0e:94:f6:40:0e:4d:cd:89:c3:50:00:7a:
         4a:11:15:79:40:c7:6a:8f:b2:82:6e:77:55:6b:0a:62:61:58:
         08:3d:eb:e2:53:3f:5c:50:42:cf:69:5c:5e:36:9a:f6:0e:ec:
         33:1e:e1:8f:43:10:2c:17:27:45:10:fb:7b:d7:65:03:71:da:
         8b:be:9e:c4:db:ad:51:bd:49:1f:d5:b4:1a:d3:ac:09:6a:b9:
         0e:ec:cb:25:0b:a2:9f:47:66:7d:ff:a7:c8:6c:36:8c:18:56:
         16:fb:6f:cc:ff:a8:79:71:d8:17:88:74:a6:d5:8d:5f:73:87:
         23:b0:4f:31:08:ed:db:3c:33:9b:d2:65:a4:06:9c:f7:c0:b8:
         4a:8e:13:de:f7:93:fb:fc:79:9a:b3:fe:cd:b3:9f:88:a3:ec:
         c9:5f:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:28 2025 by rpki-client