Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/18f1221b-0551-3fdc-844f-5cc48c1d9fe2.roa
File:                     18f1221b-0551-3fdc-844f-5cc48c1d9fe2.roa (raw, json)
Hash identifier:          n9AUMbU3rKUknEmy2TMAJTz1qmzFhVPfs4NTcvBCd7A=
Subject key identifier:   B4:81:06:C9:02:9B:71:19:1F:DF:50:7F:EA:0E:CD:6D:C2:BE:90:A9
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584ABD4BB1F827591DB3BD0C53A0
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/18f1221b-0551-3fdc-844f-5cc48c1d9fe2.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     29992
IP address blocks:        2600:8000::/24 maxlen: 48
                          2601:d000::/20 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:b1:f8:27:59:1d:b3:bd:0c:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=a95d1050-c502-400b-9879-672f3fc3ce3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:a6:dd:1c:0d:9e:ed:e5:07:e8:be:2f:73:
                    86:09:8e:0d:71:ea:78:d4:e3:84:0a:a8:5c:01:0f:
                    aa:ce:ac:44:5b:ac:86:f3:f7:da:50:3f:c0:70:60:
                    25:47:3a:21:1b:d4:64:b1:82:5a:a6:2a:20:82:6d:
                    04:e5:1a:45:f5:25:2e:7d:0a:5b:23:7e:d2:b4:de:
                    35:45:2b:ee:38:ca:54:96:03:02:28:6f:27:56:56:
                    f6:27:7c:79:de:f1:ee:4f:c0:cb:71:47:91:08:7a:
                    63:58:e0:3b:b0:2d:31:f4:71:47:4b:c3:7a:d0:de:
                    bd:f5:33:fe:37:79:1f:6c:ee:83:bb:f0:1b:05:5c:
                    08:6d:46:4c:e9:03:92:f0:15:67:4c:dc:b8:ae:dd:
                    f4:4a:67:58:e2:34:9c:1f:68:85:8b:a9:e0:59:f3:
                    b6:d6:95:5b:6e:2e:97:f8:5d:a0:2d:d1:2c:7b:61:
                    c3:af:af:40:58:d4:9a:f3:95:23:a0:e3:96:fc:22:
                    c8:3e:40:37:fc:ff:bf:73:2f:91:65:98:16:0b:1c:
                    bd:51:2e:5c:00:34:ee:f5:41:4c:5b:b1:4b:55:0d:
                    7d:8b:7e:6b:b8:ed:8d:f2:d8:06:bb:d8:6b:21:aa:
                    19:2a:f1:05:07:c0:47:68:a6:87:e8:b9:33:30:9b:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:81:06:C9:02:9B:71:19:1F:DF:50:7F:EA:0E:CD:6D:C2:BE:90:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/18f1221b-0551-3fdc-844f-5cc48c1d9fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8000::/24
                  2601:d000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:5d:e5:c0:66:05:2d:e6:a9:e2:74:fc:d5:e6:d0:af:20:
         20:02:ef:66:ad:d0:1c:5d:50:25:8e:ac:17:71:e7:82:8f:9a:
         c7:cd:7a:59:07:c2:2f:2a:d9:13:5f:8f:66:82:0f:81:2e:e9:
         77:5a:17:04:ff:7e:5f:45:e2:59:42:5c:19:0c:8c:3d:6a:93:
         c1:05:a9:49:95:c5:76:4b:4c:3f:73:0f:3e:95:75:84:61:9f:
         52:c1:ee:d4:e0:a1:4e:76:47:ba:82:52:30:e6:65:2b:c3:92:
         a1:5e:4a:c4:2e:5d:c8:32:52:ee:44:76:ea:2a:9f:fa:04:e0:
         17:0a:df:47:3d:f4:24:a6:9d:57:37:e0:cd:1a:b3:89:cd:fd:
         c6:f0:9c:46:9a:76:f8:ad:92:0a:13:0d:7f:b8:d5:fa:f9:43:
         08:63:97:7c:a6:dd:91:c1:a4:87:b9:e2:c6:2d:47:c4:96:eb:
         5b:eb:71:cd:5f:d8:a0:4d:7e:f0:e7:df:10:b9:d9:05:c3:5f:
         c1:14:0e:ea:1f:67:ea:3a:64:4a:06:ad:63:bb:98:c4:c9:3c:
         3d:37:31:9f:d7:38:e5:e5:08:98:a3:91:34:8c:c4:58:41:53:
         0c:ef:6b:d6:09:30:03:a4:af:fd:f6:f6:ff:90:71:bc:9d:91:
         8d:a5:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:10 2025 by rpki-client