Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
File:                     51ce0173-4a36-359f-b3af-21efe7090623.roa (raw, json)
Hash identifier:          dVRia8exJ+1bOkqC4cUWMgh+duVrjButvpBxMCRihaw=
Subject key identifier:   EC:64:10:7F:25:CB:A9:39:D2:37:8B:EB:0F:34:66:A8:46:86:A6:99
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584A9A662F27B1F44F6425DF8300
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     7862
IP address blocks:        2620:16d:1000::/38 maxlen: 38
                          2620:16d:1000::/40 maxlen: 40
                          2620:16d:1200::/40 maxlen: 40
                          2620:16d:1400::/40 maxlen: 40
                          2620:16d:1800::/38 maxlen: 38
                          2620:16d:1800::/40 maxlen: 40
                          2620:16d:1a00::/40 maxlen: 40
                          2620:16d:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2f:27:b1:f4:4f:64:25:df:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=1de1d321-7ba2-478c-a0e8-c886bfaadb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:39:f1:b7:55:c5:b8:be:b8:c3:22:c3:07:
                    16:68:86:26:c8:6b:d6:0e:83:6b:a3:71:22:88:e2:
                    75:f0:95:22:cd:ee:8e:8e:7e:0f:64:a0:c5:2b:df:
                    79:71:9c:c7:fd:2d:82:18:c1:9b:e4:4b:8a:41:cd:
                    ac:6b:c3:a5:0a:4a:8f:39:f0:48:11:6d:3f:1b:07:
                    3d:1f:8b:39:4d:64:92:8c:b1:64:cd:b7:10:05:43:
                    21:64:97:dd:4d:79:c8:ff:4d:98:02:75:20:18:e8:
                    e9:88:6d:68:53:0c:fb:41:ad:3b:91:33:7c:4e:2a:
                    56:dc:01:6b:3f:12:41:7b:b7:47:19:41:6b:0a:e0:
                    2c:b4:2e:c6:80:0a:4c:08:a2:08:c0:92:ce:3a:4f:
                    9d:29:dc:47:63:51:0c:91:0e:fb:7c:37:63:55:0e:
                    49:71:9a:b8:02:6c:e9:26:82:3f:40:a6:bc:4e:cb:
                    21:62:b9:8b:1b:1e:d2:d9:1d:99:3a:c0:0f:23:68:
                    c0:82:ab:ad:63:01:06:db:71:e7:34:c2:7d:5d:7a:
                    cc:17:1d:11:83:24:6c:95:e0:bd:35:81:1e:2e:6e:
                    3c:fc:5a:fa:a2:08:91:52:42:17:2e:72:64:c3:2e:
                    74:24:2b:c0:f3:03:d2:05:01:cc:6f:05:4a:b1:73:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:10:7F:25:CB:A9:39:D2:37:8B:EB:0F:34:66:A8:46:86:A6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:16d:1000::-2620:16d:14ff:ffff:ffff:ffff:ffff:ffff
                  2620:16d:1800::-2620:16d:1cff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:30:c0:2f:2f:a1:ce:23:05:3e:44:5a:24:19:2f:a4:2e:e8:
         7f:a7:8e:b2:ad:00:36:b6:e1:74:ec:3e:11:54:7a:62:87:e3:
         be:59:ed:d1:ff:69:51:18:bd:1b:be:f3:3c:08:73:52:71:c8:
         6b:9e:02:0e:0b:a8:df:5c:47:32:bc:0f:4a:a3:73:5a:6f:7c:
         10:e9:f3:c7:00:3b:36:90:1f:8e:25:66:20:f8:c6:a0:55:2a:
         8d:3f:bd:17:82:fd:8f:a2:8a:08:bd:ae:7f:bc:d3:bf:e4:af:
         b7:0f:21:41:8d:7d:a2:0d:0a:21:5e:99:ea:6d:1f:6b:d9:60:
         0e:83:f4:58:73:22:63:5f:7b:f3:73:0f:61:9d:37:eb:a5:cf:
         f4:15:dc:fa:8b:2b:74:a7:35:fd:3e:2e:bc:82:c7:a5:94:ad:
         62:f6:57:c8:f9:29:09:9d:cb:8d:5f:8d:0e:98:8a:76:3b:b3:
         4a:46:1e:01:40:c5:97:67:cf:2a:41:7a:18:12:be:57:a0:b5:
         ae:e8:a9:ab:fc:b3:cf:1f:39:6b:7f:69:08:ae:b2:41:74:af:
         3b:63:39:04:f2:5d:35:21:f4:1a:68:28:ef:3b:97:a5:0f:f4:
         a7:56:e1:01:a8:a3:b1:74:3b:9e:99:c0:17:84:ea:30:39:5b:
         ce:89:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:18 2025 by rpki-client