Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa
File:                     11ea8b89-c326-307c-8031-9272ff40ca55.roa (raw, json)
Hash identifier:          LRtSwdgon1rLU6IPYavDmTLStHS0UDfVX7/Vw84EDbg=
Subject key identifier:   C5:27:18:27:51:42:6E:9E:AE:FE:37:19:DD:03:AE:8C:88:28:9A:02
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584A8575EA7EC7B2E01880A4DD80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     835
IP address blocks:        2602:fd50:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ea:7e:c7:b2:e0:18:80:a4:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=cf055dd6-d46c-419e-9ad6-525c5b76f67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:b1:1e:a2:f3:c6:d6:6c:01:98:5a:65:21:
                    c2:1c:fe:ea:d1:9e:e6:5b:ab:6d:ee:c8:6f:fc:02:
                    ba:b5:47:78:9c:7c:bd:94:3c:95:40:bc:83:ce:10:
                    31:37:0d:9c:45:f4:69:da:30:bc:36:de:79:44:4f:
                    01:61:98:6f:09:44:18:b1:6f:db:65:d5:3b:ac:90:
                    83:5f:31:b2:5f:cd:4f:36:5a:16:4c:1d:8b:2b:9a:
                    35:f9:76:05:08:7a:09:a3:2c:4e:8d:66:28:8e:b1:
                    92:4c:42:a7:22:0a:b4:bf:76:40:7a:13:da:ac:b0:
                    c9:5b:1e:08:d1:33:8e:cb:f5:47:0e:73:d2:a9:d1:
                    fe:d1:ea:a7:e0:80:91:bd:9a:df:9b:72:44:1a:f4:
                    b9:40:4a:de:b4:9c:37:2f:a2:28:e9:98:e1:eb:ff:
                    f2:62:8a:9f:96:6d:f0:c9:25:dd:90:d3:f7:1d:d7:
                    01:1b:27:e9:b7:d5:e5:4c:55:3b:8a:ca:8d:af:d0:
                    a2:52:95:49:2d:66:cb:ca:79:59:15:59:f0:09:2f:
                    55:1a:f2:7a:c5:a4:ac:fc:52:2c:4a:db:a5:17:ac:
                    2b:a5:31:ba:4b:40:7a:56:05:83:d8:15:30:6e:9c:
                    ea:1b:ea:85:a0:bd:7b:71:a9:57:fc:b1:ae:32:a3:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:18:27:51:42:6E:9E:AE:FE:37:19:DD:03:AE:8C:88:28:9A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:88:1c:56:2f:36:95:e6:4c:8e:ac:dc:7a:e7:08:a3:f2:
         ea:1c:ce:fb:03:fc:27:df:4b:f1:d6:5a:45:ac:8c:c0:da:95:
         44:a3:8d:e8:4c:46:15:6d:ce:e9:b8:a4:16:91:b2:be:9f:4e:
         e8:79:62:e9:dd:3e:f7:86:b7:45:da:75:ab:76:e4:91:d8:ca:
         32:13:75:e8:e3:e2:0b:f9:35:2f:76:f1:1e:ad:12:e0:d1:51:
         01:8b:02:61:c1:cf:f5:ba:fa:68:1a:26:6d:64:a1:cd:d6:2a:
         b5:71:6f:2b:c3:ef:10:40:7d:87:a7:3d:f7:c9:72:0c:f8:37:
         4d:b9:f6:20:d5:11:48:40:5c:f9:ec:47:3a:fa:b2:c8:b4:3d:
         7b:bb:d0:fe:90:ab:29:74:9d:6a:5a:b1:eb:21:58:ad:41:0e:
         0c:28:4b:b2:59:4b:c3:9e:71:a8:90:94:de:82:67:f3:80:22:
         fc:c8:09:e0:3a:99:dd:36:ce:8a:6f:88:70:ec:68:32:cb:18:
         a6:5a:0a:17:d7:02:96:c1:60:b0:1c:4f:2b:e8:78:6c:f1:7c:
         c4:d3:95:a9:1c:77:f7:77:64:da:6e:06:c6:38:1b:4c:92:d3:
         41:0b:94:2d:a3:8d:ca:ad:0f:5a:b3:f2:1a:ab:f8:7c:b7:19:
         e1:eb:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:10 2025 by rpki-client