Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa
File:                     ae72c7a9-987e-3ba6-8133-73bafe049409.roa (raw, json)
Hash identifier:          u1SzBg84skm1EhXhSCm+g5HRk18w4B/wvQmY4UpTbzU=
Subject key identifier:   7C:D0:29:84:BA:D7:E1:D4:D3:F1:56:32:FE:44:17:6F:D9:F9:36:AF
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F4328584ABD4B8FABBFD9C45D38EE1040
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     13781
IP address blocks:        2606:6dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8f:ab:bf:d9:c4:5d:38:ee:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=267ffc5d-fc63-4f63-81b3-271ec79d761a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:16:05:7c:83:ef:75:86:8e:93:b5:c0:b6:
                    0b:46:3c:dd:a7:37:4b:b5:28:dd:9f:c1:fe:ac:66:
                    a4:e0:1c:8b:da:87:e7:d4:e7:57:d4:9e:cd:e0:e7:
                    98:a1:f8:28:08:7a:04:a3:45:72:9d:a4:7c:84:b3:
                    da:82:c8:f4:07:fa:ce:0d:45:ca:d6:e5:4f:eb:f3:
                    84:e4:26:de:25:03:e9:38:89:d7:07:27:e8:bb:f8:
                    f8:61:a7:a8:06:73:f0:c0:00:8c:bd:ce:cd:11:a5:
                    75:3e:f2:2b:66:42:45:fc:1f:04:96:a7:b5:91:14:
                    d5:86:3e:50:8b:af:6c:58:dd:7e:a6:4c:43:bf:9f:
                    5a:81:9e:6d:fb:4c:28:b5:ea:5f:51:f2:04:df:89:
                    00:14:49:d6:8b:4b:76:51:62:d2:4a:b8:9a:0f:f2:
                    33:a8:a9:87:43:50:38:9d:68:40:49:ff:5e:a4:63:
                    b8:80:f0:0a:74:66:bb:dc:6f:f4:8f:36:d7:59:69:
                    08:fb:29:03:81:06:61:ec:eb:35:40:f8:77:c6:66:
                    0b:7b:87:2d:59:4e:08:c2:f6:90:1c:d1:7b:6b:0b:
                    6a:3f:43:23:cf:de:7c:0c:a6:7f:f5:3e:6a:c6:70:
                    0b:13:72:9c:dd:f8:a6:9e:4f:60:b3:bf:c4:98:70:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:29:84:BA:D7:E1:D4:D3:F1:56:32:FE:44:17:6F:D9:F9:36:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/ae72c7a9-987e-3ba6-8133-73bafe049409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:b1:1f:3d:21:fd:0f:8c:44:4a:ec:c5:57:67:11:c0:c0:
         ee:27:da:51:78:ea:42:40:cd:b4:cc:10:d0:e4:bf:e1:7e:74:
         00:6f:26:79:da:b1:19:b0:59:68:e8:84:ae:6b:6b:c6:47:4d:
         55:c5:66:c4:82:02:bf:4e:b0:21:6f:d6:3c:41:87:11:64:ef:
         12:95:78:5c:29:a1:73:0b:af:01:65:bf:54:ed:ac:b2:8e:b9:
         54:7b:53:76:38:bf:67:04:77:5e:3e:dc:11:28:2e:1a:96:e7:
         1f:89:d3:a0:a9:96:60:70:0d:13:4d:29:4c:44:5e:45:35:2d:
         4c:42:6a:8f:e7:67:48:e8:2c:88:2e:dd:8a:ed:23:64:f1:40:
         58:e2:1e:d4:d3:e9:1f:a5:e8:3a:cc:e4:9f:04:78:01:0d:af:
         d5:28:07:6f:67:12:92:e1:4c:15:1f:f4:f5:84:6c:3a:7c:a6:
         90:50:2c:2c:69:bb:19:1e:dd:1d:d0:e8:07:93:e2:50:03:db:
         bc:32:2a:2a:9c:44:2e:52:fe:ec:bf:92:21:8e:c3:e3:3f:2e:
         56:6a:de:0d:4d:3a:7b:39:93:74:35:17:02:1c:79:8c:58:04:
         46:b2:87:10:77:c3:ff:e8:dc:02:5b:0d:4f:11:72:c1:77:a3:
         8d:4a:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:42:04 2025 by rpki-client