Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/8e246558-51d4-3ff0-ad30-109fc9bc33e8.roa
File:                     8e246558-51d4-3ff0-ad30-109fc9bc33e8.roa (raw, json)
Hash identifier:          Gi/xxYG6aLCgOpVO9EllTuT79uJOc+GhiDU3PjyEARY=
Subject key identifier:   1F:D3:28:15:19:9A:35:39:67:AD:88:43:0D:13:33:07:17:00:ED:AA
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584AAF56150B6D21C9C8168FD300
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/8e246558-51d4-3ff0-ad30-109fc9bc33e8.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     142382
IP address blocks:        2602:fbe8:f4::/48 maxlen: 48
                          2602:fbe8:f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:15:0b:6d:21:c9:c8:16:8f:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=102881a2-b733-40b7-b1d0-b563d42c1d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:66:7f:fc:21:b8:19:c0:8f:44:ee:ae:92:
                    84:45:42:0a:2a:94:84:e7:8a:47:ab:f4:bb:f7:76:
                    ac:ea:18:af:68:62:66:ac:b2:05:0a:ad:5c:c8:5b:
                    d1:8c:4f:da:03:41:e8:41:5b:cb:b0:7f:c8:0c:de:
                    10:ce:b0:8f:7d:3c:f7:db:e4:6a:b2:fb:d8:5b:90:
                    42:21:e8:58:0d:db:7c:46:6d:09:27:5f:63:2e:0a:
                    23:25:15:f5:ca:85:f9:2a:d6:95:31:1a:db:a7:56:
                    99:d3:4b:da:de:e4:d8:f8:8e:db:bf:bb:fa:6a:21:
                    1b:1b:7a:21:6d:9a:36:a1:2a:d0:0f:39:e5:42:90:
                    4a:64:d7:70:f1:6e:89:ba:51:75:7d:4e:d9:54:c0:
                    00:2c:85:af:ea:ff:61:02:8e:36:ed:95:5d:b5:fc:
                    cf:95:ec:6b:6d:77:c2:67:a2:bf:69:18:f4:2e:6f:
                    40:5e:7a:11:59:48:21:e9:f1:20:bb:61:7e:f7:7d:
                    b7:86:4d:c9:08:9a:2e:a9:7d:60:b8:63:5c:b7:8b:
                    c9:d0:07:15:24:c7:87:2b:87:e4:ac:e7:ac:32:2c:
                    e7:79:70:a3:20:ab:bb:11:7b:4f:3d:65:56:fe:be:
                    4d:1b:b4:08:ac:94:f5:54:ab:73:c8:1c:38:a1:03:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D3:28:15:19:9A:35:39:67:AD:88:43:0D:13:33:07:17:00:ED:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/8e246558-51d4-3ff0-ad30-109fc9bc33e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:47:0a:15:de:68:7c:cd:78:1b:b0:27:5b:f2:21:1c:ff:f1:
         7b:5d:83:b9:be:c4:14:07:a9:5c:34:6e:4c:90:93:89:42:fc:
         b4:cb:ca:81:69:3e:35:b7:e5:56:9e:41:79:13:76:a7:b4:80:
         1f:be:a9:a9:a0:6e:ff:fd:7f:f1:a2:3c:cd:74:bb:d1:11:75:
         2f:d4:84:09:a4:d7:76:46:7a:64:22:2c:a6:ec:33:4c:83:9f:
         ff:9b:03:e0:06:55:4d:db:e0:22:1d:0f:ba:66:1b:05:78:ac:
         c4:38:fd:60:04:88:23:c5:76:4c:4b:f7:72:8c:31:59:f8:9b:
         26:53:39:61:8a:af:5e:60:c4:90:19:42:51:8f:ba:c9:c1:8e:
         38:cf:94:6b:db:eb:7b:52:ea:59:30:14:12:64:31:3e:91:b5:
         4a:0f:a1:ce:4b:db:13:9c:13:4b:1f:78:d1:80:17:d3:29:77:
         18:3d:b4:ef:9f:c4:76:4b:94:40:22:16:15:30:f3:57:c5:d5:
         bd:0a:b7:0f:00:b0:ce:2d:27:70:4d:6e:44:16:05:fb:a6:42:
         64:6f:e0:82:3f:da:e4:f8:72:01:d3:62:57:89:54:18:e0:82:
         5b:ea:fd:e0:2b:28:57:c9:85:6f:c3:f4:8a:0e:b2:ad:b2:6f:
         1b:55:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:59 2025 by rpki-client