Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/8995b804-8c21-3269-b8e0-e2118807e9fc.roa
File:                     8995b804-8c21-3269-b8e0-e2118807e9fc.roa (raw, json)
Hash identifier:          E0LtSAjwFOWJioG3KaHRDPQMNJ/EFy+xHCeDMsDUNZ0=
Subject key identifier:   8C:E6:C8:C1:C1:4B:A7:AA:76:6C:A2:2E:CC:56:04:6F:4B:8A:59:71
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A6290CBEA1EE236AA0D977D00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/8995b804-8c21-3269-b8e0-e2118807e9fc.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        2604:5500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cb:ea:1e:e2:36:aa:0d:97:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c5f8fddc-d660-4246-8e1c-bc6450abd06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:47:bc:d2:e9:61:9d:70:73:72:79:12:43:
                    2c:24:48:24:51:f1:da:7e:f9:a0:15:52:70:0d:c6:
                    60:5e:3d:ad:93:ce:31:26:ab:76:e8:c4:4a:f4:e8:
                    70:56:85:3c:4e:87:47:e1:0c:10:a8:da:e2:d5:50:
                    1d:a9:75:80:73:56:83:04:46:b0:24:17:a5:e1:6d:
                    cf:71:ad:c0:ff:eb:a1:bc:15:d2:4d:5a:8d:21:52:
                    0a:e3:68:d8:be:a1:48:03:c0:f8:9f:45:eb:ad:7d:
                    99:fe:4b:a1:d2:ff:c6:ea:3b:b3:fe:a6:44:ec:f6:
                    71:84:02:4a:65:a9:18:25:58:6f:01:d3:c3:b3:0a:
                    c8:d9:81:d4:02:6a:9d:44:26:29:64:5a:d9:c8:4c:
                    af:2f:5c:7c:3c:78:70:d4:c7:23:49:88:01:68:ca:
                    9d:e3:0d:0e:cc:47:ad:d8:c3:ef:85:5c:e4:24:1a:
                    b9:fb:27:30:65:1e:56:01:92:00:fc:a8:2a:94:90:
                    94:3f:d8:68:c4:cc:71:3a:df:9a:9c:f5:5c:de:fc:
                    d3:6c:03:ab:c4:f0:a7:33:14:15:62:ad:39:b8:02:
                    ad:d7:55:f9:95:bc:a3:00:67:26:b0:11:94:bb:fc:
                    fb:19:0e:88:57:b4:d6:72:e4:52:cf:05:df:60:45:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:C8:C1:C1:4B:A7:AA:76:6C:A2:2E:CC:56:04:6F:4B:8A:59:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/8995b804-8c21-3269-b8e0-e2118807e9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:19:d1:5a:04:3b:50:4c:c5:7a:b9:eb:53:40:17:c1:93:0a:
         ac:30:8d:3d:c6:72:31:fd:6b:92:06:9a:bf:20:3e:96:e6:6c:
         39:30:62:dc:d7:04:6f:b5:e1:cf:15:af:1e:34:e8:65:68:8f:
         38:94:86:7f:64:8e:79:43:37:6c:0a:86:fe:16:e2:bc:f4:a7:
         34:fb:65:6e:f1:3c:25:b9:2c:53:39:1f:86:08:2c:97:f0:3d:
         31:6c:00:94:ae:96:f9:8c:e0:60:2e:d2:ae:4f:6f:76:ea:e5:
         21:f7:34:ac:ea:8d:ba:a8:fb:20:97:a3:8e:17:4b:12:b9:cc:
         eb:3f:9e:37:24:f6:2c:b8:47:7d:4d:f4:31:cd:05:28:d8:85:
         ec:02:f3:45:b6:8e:6a:12:05:c1:a1:7a:6a:b8:63:87:0c:9a:
         2f:ce:09:cd:7c:48:44:83:2a:33:89:45:e5:72:b6:f3:bf:51:
         c3:ea:bf:52:47:e6:3b:8c:2f:0c:c5:b5:73:5e:14:aa:b9:3b:
         82:36:13:86:a5:4b:5a:f0:7b:0a:35:09:e7:45:fe:f4:54:52:
         88:b4:de:6a:73:6b:3a:13:7a:c9:e7:0b:03:22:b6:81:91:6d:
         a1:8f:81:0c:d7:5c:65:64:6d:87:19:3e:1b:6c:a3:65:fe:f2:
         e8:b5:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:54 2025 by rpki-client