Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/47b03c6a-545b-3181-b4f7-348cd415e5fc.roa
File:                     47b03c6a-545b-3181-b4f7-348cd415e5fc.roa (raw, json)
Hash identifier:          /Na6PeYRBnzYzILkZBw28xV4zOlPs5M7SVZkagQF3tU=
Subject key identifier:   03:D0:A9:1B:34:86:CA:06:4C:EB:5C:46:16:55:8D:23:DD:1A:D2:BA
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A6290D699096D111689C84580
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/47b03c6a-545b-3181-b4f7-348cd415e5fc.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        2604:5500:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d6:99:09:6d:11:16:89:c8:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=0c46399d-8156-4f55-a7b2-f5744fb3d27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:00:ca:b2:91:b4:8f:87:f4:c7:e9:b0:a0:
                    c8:65:d8:a3:cd:12:5c:c5:d3:b1:47:d0:19:40:4b:
                    a4:1b:4e:04:be:28:22:0b:fa:33:55:a7:3c:51:ac:
                    72:9f:92:35:64:b2:da:27:f2:15:e9:b0:2f:b8:c8:
                    ee:4a:d7:4e:5c:33:fd:66:a6:66:c5:c0:be:3a:4d:
                    2f:74:3b:57:a8:d5:23:99:09:63:12:d9:4d:0c:51:
                    a8:c3:77:ba:bb:2d:26:b0:dd:95:ca:da:cf:29:9b:
                    fe:74:36:07:cf:a6:9c:63:b1:37:3b:b9:4b:13:9b:
                    35:ab:4c:ef:56:97:55:64:5e:98:70:69:62:6f:d6:
                    89:7c:be:e6:82:0c:47:ad:e6:e7:5e:22:05:24:34:
                    e7:4a:02:49:b1:af:f1:18:41:e2:2c:4c:3b:2e:35:
                    e1:b3:76:8f:ec:64:0b:b9:46:57:8f:4b:55:f6:36:
                    ee:a1:a7:a1:7e:ce:34:e3:1b:17:13:e2:a2:a8:5c:
                    92:9a:46:11:66:ed:6c:01:f6:07:f6:f0:b9:9d:9e:
                    bc:e4:79:8d:21:7f:e9:b9:8f:49:97:96:f7:5c:51:
                    3f:64:37:25:0e:e8:48:10:11:75:b4:dd:9e:f6:ae:
                    17:4a:eb:08:83:98:9b:6b:a0:da:17:46:95:f1:50:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:A9:1B:34:86:CA:06:4C:EB:5C:46:16:55:8D:23:DD:1A:D2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/47b03c6a-545b-3181-b4f7-348cd415e5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:23:82:10:fc:ec:ad:9c:9b:c0:d3:54:07:6a:ed:5e:90:
         26:37:c1:e3:a6:da:4e:88:5f:a6:3e:d3:19:25:ed:65:db:3f:
         65:f2:10:4a:80:62:56:96:e1:9d:04:bf:60:ae:3a:a5:51:e3:
         e1:90:f9:af:d4:c1:1b:d2:83:d5:ef:e0:21:ef:5b:5d:b5:d5:
         64:91:a3:a7:d4:09:64:3d:0f:6f:ff:dc:9a:b5:84:f3:2e:ff:
         41:c7:52:30:28:e9:a6:6f:29:14:e8:1d:54:7a:c5:d6:60:18:
         d5:e3:a9:b1:7c:27:53:50:80:93:fa:fa:84:66:4f:87:b6:36:
         29:6b:0f:3e:d9:be:79:16:db:e3:f1:da:4b:83:9e:07:d5:29:
         7a:af:86:b2:bc:41:9b:80:b4:d1:09:8f:1f:12:28:a6:9d:4d:
         2a:eb:c6:36:ad:9a:e5:01:96:64:ba:46:79:6f:7a:26:94:01:
         38:78:7e:de:1f:65:26:f5:80:65:47:ba:e9:78:51:93:68:67:
         87:e5:4a:4d:c1:1f:e3:1a:c7:f7:d3:89:14:5a:e6:62:68:64:
         4d:51:81:e0:16:54:61:1d:42:3e:43:3f:05:cf:5c:92:09:64:
         dc:eb:71:8a:0c:ca:a8:6c:31:de:cf:7d:4b:6b:8d:66:9b:f2:
         42:cc:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:30 2025 by rpki-client