Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa
File:                     bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa (raw, json)
Hash identifier:          KKRClBWARP+06pgLNPsQPvlYltD+qxcJ2SJyZ3rao90=
Subject key identifier:   62:AE:D3:9E:2A:99:15:ED:83:05:53:C4:BD:2D:3E:6E:7F:61:BB:1C
Certificate issuer:       /CN=11150dfe-c654-4719-b6c3-642628555522
Certificate serial:       010D0C9F4328584A9900C91A11B94AB674077F20
Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     15191
IP address blocks:        2604:4180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c9:1a:11:b9:4a:b6:74:07:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11150dfe-c654-4719-b6c3-642628555522
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=159491b9-1677-434e-8dd2-1ea93f72c3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:a5:eb:62:86:e0:56:d7:83:dc:b2:81:4d:
                    18:c8:53:cc:4b:48:d6:06:3b:bf:1f:c7:5f:e0:bc:
                    4d:a6:32:3e:ed:64:a1:e0:1f:e9:f8:8c:23:69:c9:
                    55:3d:76:e8:74:26:9b:d4:9a:fe:84:c7:3b:d2:22:
                    77:80:ea:ca:cb:1d:ac:32:5a:cb:67:02:80:54:6d:
                    28:0a:ff:07:57:20:91:b9:cc:37:84:52:fd:b8:04:
                    dc:61:99:5a:c8:0f:17:09:f3:00:0f:84:f3:b7:bd:
                    a0:06:9a:c0:09:e0:7c:b1:55:a5:27:56:a8:fc:e9:
                    52:7f:71:5f:99:59:7e:96:1b:0f:a7:80:77:e7:fb:
                    41:e3:50:eb:54:32:a8:53:58:11:db:98:b1:80:11:
                    e0:26:63:4d:ac:f1:ec:01:4f:f1:a8:9a:90:b7:c3:
                    43:9d:09:2b:0e:84:2d:b9:42:47:e5:a0:60:95:29:
                    d0:d8:e6:97:19:bc:98:c4:df:da:49:88:4d:1c:d2:
                    64:10:32:08:30:c1:cf:87:02:12:fb:fb:6f:89:db:
                    04:1a:c7:5b:98:50:69:78:2a:82:b6:35:20:42:64:
                    7f:e6:ea:8e:ed:59:41:3a:62:4a:66:64:3a:b9:18:
                    6e:a7:30:5b:0d:bc:a9:5b:b0:f9:30:7b:f7:eb:c5:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:D3:9E:2A:99:15:ED:83:05:53:C4:BD:2D:3E:6E:7F:61:BB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl

            X509v3 Authority Key Identifier:
                keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:52:db:47:08:32:c4:47:91:01:5b:88:88:a7:54:80:7d:
         28:68:f6:9d:fb:c5:15:32:44:82:11:5f:6b:b6:f8:d4:e1:65:
         58:02:7c:c0:8f:60:2c:a7:e4:18:b0:96:d7:fd:23:a5:c2:44:
         a4:ec:25:62:f8:21:d7:53:67:c1:75:be:d7:fd:f3:56:c2:f7:
         d2:b2:e0:73:e2:5d:e4:97:f9:1a:25:2a:d8:09:62:53:95:2d:
         48:4f:a3:e3:2c:31:79:05:48:af:55:dc:3c:34:f7:39:91:2b:
         02:69:e1:b7:d7:71:bd:ab:c5:9d:e8:c8:0b:b5:53:62:a9:f7:
         d7:18:ac:1e:b7:93:e6:b2:3f:42:f3:cb:57:14:f0:c4:61:27:
         9d:ac:9f:c7:55:4d:8c:0b:54:c2:39:3d:bb:bd:c2:2e:7e:e1:
         cd:e4:1d:67:37:da:9d:95:69:f1:a6:98:e9:f2:48:b5:88:df:
         ae:07:25:c2:05:e8:63:a4:6c:fb:f9:db:03:64:3c:4b:d1:f8:
         4d:19:e6:2e:c4:c9:b6:4e:c0:7a:5f:c7:64:09:42:f6:40:e5:
         8a:db:cd:bd:af:4e:12:0e:b8:1e:f3:eb:06:78:50:be:74:d4:
         78:0b:59:1e:b0:b5:09:f3:95:fb:53:1c:d9:df:34:9e:b7:2d:
         66:7e:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:33 2025 by rpki-client