Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
File:                     c4518de9-d056-34ce-80de-4fe9f545eb73.roa (raw, json)
Hash identifier:          0hZW4uydj5KtzLV4+wnYwAU1Tz9Q/oG7wCrcWvAM2vU=
Subject key identifier:   C0:45:FC:3C:F4:4A:D3:45:99:6E:05:AC:98:ED:DB:BC:1A:BD:8B:70
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F4328584AB91BA7C447718A753B8DAA00
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     3152
IP address blocks:        2620:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a7:c4:47:71:8a:75:3b:8d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d29961ec-c051-4823-bae9-9b66c31a87bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:c6:a7:b6:5b:d1:40:ea:47:e8:0c:73:89:
                    bf:3a:ef:98:76:6c:75:05:62:34:84:46:b6:e2:41:
                    c2:c8:f6:9d:f9:21:0f:ab:cd:df:de:c6:59:2b:f2:
                    56:f5:b2:0d:3f:c5:6b:aa:c6:37:86:3e:b8:22:cc:
                    6a:89:3f:5a:94:31:33:0e:83:db:72:e4:dc:16:1a:
                    9c:2d:90:dd:0a:dd:ac:93:84:43:20:93:2c:c5:3e:
                    68:bd:b8:a8:71:6c:de:4c:c3:14:80:49:7c:09:57:
                    26:69:9a:1d:8a:6c:fb:ef:8b:d3:17:ef:09:3e:9d:
                    46:e6:4f:60:64:36:af:b0:07:47:21:e9:02:c0:50:
                    5b:6d:0e:c1:7f:68:ee:c0:86:58:20:cd:04:15:b9:
                    7e:3b:a5:30:48:69:fe:d1:12:f8:24:60:c3:7d:50:
                    1b:06:3f:73:e5:14:d8:ab:12:83:09:c5:4c:21:a7:
                    fa:e8:77:8f:35:75:f2:c0:d9:89:fb:26:80:0c:25:
                    1a:83:ee:49:1f:ef:7b:61:ca:1d:12:cc:33:b6:bb:
                    a0:e3:4c:b5:b7:f9:c9:42:16:f9:94:fe:17:1d:ce:
                    de:3f:78:bd:27:3d:3b:ee:9f:27:ea:ce:8c:c7:f5:
                    35:87:06:aa:3c:58:00:71:28:71:61:19:d3:7c:cf:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:FC:3C:F4:4A:D3:45:99:6E:05:AC:98:ED:DB:BC:1A:BD:8B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:58:cd:ae:c4:6c:c1:1b:e2:a9:ae:bc:32:eb:cb:7a:7b:
         dd:18:bd:15:5f:5e:6f:d0:26:d8:8c:87:2a:fb:7b:c6:29:3c:
         d3:ec:51:14:a6:94:63:51:4b:59:0d:5c:89:79:f9:81:79:94:
         63:be:e1:50:c3:7c:d5:e6:ad:80:aa:db:05:26:7e:56:8f:17:
         0c:8f:fd:1c:41:74:81:d4:e2:f0:e6:35:96:ad:fd:2f:3c:b1:
         25:d6:38:21:74:04:16:4e:db:ba:49:72:16:d2:d8:5f:11:38:
         1b:45:71:ba:0c:75:a5:d7:64:85:c7:62:b6:3c:9c:42:2e:2c:
         5d:31:c1:0a:b9:27:d9:3e:25:30:46:e6:aa:ee:31:8e:42:29:
         3a:7c:57:4b:9f:a5:d5:58:98:46:53:0c:3c:40:21:d6:56:78:
         4e:75:9c:bf:51:01:f8:8c:68:5b:fd:62:d5:67:1f:59:ce:14:
         16:b7:6c:50:24:4b:97:1d:63:b3:ff:f9:b3:6a:76:fd:f7:dd:
         15:10:1c:67:d6:88:42:12:05:d3:b6:d3:fe:98:b5:51:91:95:
         f4:84:6c:08:02:f1:14:17:6d:e6:85:c5:47:34:a4:c4:72:cf:
         87:3d:0a:e6:fc:9f:95:e7:94:9b:61:e7:7c:5b:cb:c1:8f:2a:
         53:53:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:38:13 2025 by rpki-client