Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
File:                     1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa (raw, json)
Hash identifier:          BovLK1GA0M1gJu0Wv+8J1j8BKek1BtcJY71tKpIzaDc=
Subject key identifier:   8B:5A:A3:E8:51:81:3A:32:9D:CA:76:71:3A:03:60:00:36:48:A4:B8
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F4328584A77808F35859465183349FC80
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     401466
IP address blocks:        2602:f874:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8f:35:85:94:65:18:33:49:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=a9510ec3-dc71-4ba6-9287-b93e194292d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:53:db:1c:34:b5:04:0e:e7:8a:03:c8:32:
                    4c:c4:52:da:28:ae:70:e9:d4:c2:70:09:65:25:de:
                    93:81:c8:e9:d1:1f:9e:e0:99:ea:c2:7f:93:2d:04:
                    be:40:63:53:83:42:e5:b7:13:45:0e:8e:79:21:13:
                    6a:db:98:36:54:0c:28:d8:ab:0b:5c:4b:45:f0:18:
                    d3:d3:2b:04:12:3c:70:b0:03:f8:05:8f:39:1b:38:
                    86:a3:94:1c:1c:46:b7:e4:51:6e:a3:c6:e7:01:fb:
                    09:39:8b:f5:05:b4:c6:0b:c8:d3:d8:bb:28:73:f4:
                    86:0a:a5:6e:4f:68:3b:2a:f7:b1:c0:87:d8:6f:d1:
                    e7:53:70:e7:e0:46:40:5a:0d:94:dd:f3:4d:95:fd:
                    d5:72:5e:fc:39:d1:60:17:22:68:06:ac:4a:d5:b8:
                    60:c1:27:12:3c:6b:dd:6c:51:da:03:a9:da:7e:cb:
                    e3:75:b5:a1:77:db:2e:15:78:6b:7b:da:62:58:df:
                    85:fb:90:d2:f0:f6:b3:0a:3e:43:17:5b:3c:ba:ba:
                    37:33:52:59:56:9f:1c:44:6c:8b:5d:55:47:fb:5e:
                    f0:cd:d0:e8:98:55:e3:3d:b8:a6:c6:92:d9:92:f1:
                    84:23:85:62:d1:84:9a:ad:56:4a:cb:74:16:ef:a6:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:A3:E8:51:81:3A:32:9D:CA:76:71:3A:03:60:00:36:48:A4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f874:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:30:bc:ba:45:95:4c:02:91:46:31:81:2c:3a:be:af:e9:52:
         e8:96:4d:db:b9:02:ab:f2:33:f7:4f:77:1a:a9:09:55:84:56:
         bd:f8:63:6e:f3:16:d1:fe:46:0f:59:4d:d4:f3:5d:6c:f9:37:
         4d:22:c7:55:66:4d:21:7c:e8:b5:52:8a:1a:86:41:79:9a:59:
         86:18:dd:9a:d0:e2:85:49:d2:9c:e0:c1:61:9c:4a:9a:21:36:
         6c:93:9e:16:72:db:c8:23:21:3e:64:48:4c:96:db:98:2e:43:
         16:be:b0:01:21:96:30:24:bf:f3:06:18:fe:fb:15:f4:a0:04:
         b5:7c:04:cf:5d:28:f6:2e:04:4b:5f:61:f7:9c:62:8e:a1:3b:
         02:b4:ea:7e:ed:76:8c:a2:cf:05:38:f9:41:0c:fa:f3:0d:a8:
         0e:d6:4d:f9:17:41:e5:10:37:00:92:dd:01:73:9d:ac:48:b5:
         e1:51:6e:db:51:9e:dd:71:61:d8:57:2b:90:d4:60:94:c8:63:
         db:a9:3a:bf:48:f5:53:75:33:24:3e:24:71:0b:99:ee:af:6d:
         b8:1b:27:bc:d3:fc:13:a3:71:46:16:e8:4b:d1:b7:4e:6f:c6:
         10:54:98:d1:86:4a:c7:9c:f6:83:5b:fd:75:e5:ac:29:ee:f7:
         67:c3:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:14 2025 by rpki-client