Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
File:                     b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa (raw, json)
Hash identifier:          tDp3vvCC+jxw0c2SAjwS+PFlU+gMB/HVI/CXFQP/6yw=
Subject key identifier:   9E:15:B2:05:D5:98:79:83:41:90:39:97:07:9A:1A:3F:22:28:A6:A2
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584A963688EFA13972D52AF3BC00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     399045
IP address blocks:        2606:d640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:88:ef:a1:39:72:d5:2a:f3:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=914229ba-8c83-491b-beda-58a8c3e99bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:32:49:a7:e4:ea:a1:3f:0e:6d:7f:1a:41:
                    f4:6b:20:47:35:48:e9:df:f8:d7:a9:09:19:ec:8b:
                    9a:dc:41:a1:86:0c:dc:8c:0a:27:de:8f:e9:69:83:
                    b2:d7:82:8f:c7:d2:81:6f:be:51:da:fc:61:5b:4b:
                    3b:5b:7a:0b:28:83:5b:9c:7d:6d:e7:40:1d:85:81:
                    10:66:8d:2f:13:78:90:e9:1d:da:46:d8:38:7a:e2:
                    b7:3a:a5:21:db:c1:9a:d6:88:ec:1a:22:fe:15:cf:
                    50:79:9a:fe:8a:df:9f:11:b3:06:8b:b2:1b:16:ae:
                    bc:8c:ef:aa:e8:ea:d6:f2:cb:91:d3:30:f1:b7:c4:
                    c6:2b:cb:1c:43:e8:1a:99:22:83:5f:7f:22:d1:ea:
                    98:24:30:65:e1:43:2b:58:73:e0:bf:8f:82:96:3f:
                    21:15:7d:6c:1d:cf:f9:4b:28:94:59:6b:8e:d9:b9:
                    52:54:67:d1:16:98:5c:68:05:06:eb:1c:59:b7:fc:
                    29:6e:1e:78:b4:e5:17:fd:c4:00:df:e4:63:45:56:
                    22:98:0c:aa:4b:0f:06:d7:74:db:43:67:0d:8f:58:
                    18:08:d5:26:29:32:5a:0c:6c:9b:11:ee:81:98:3f:
                    ec:2f:da:d9:7e:dd:4f:4c:11:8d:00:c0:78:c9:60:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:15:B2:05:D5:98:79:83:41:90:39:97:07:9A:1A:3F:22:28:A6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:77:60:51:96:2b:a5:83:97:6b:de:3b:13:70:1a:4a:bd:
         af:19:f2:13:1a:29:d0:03:e9:ef:ab:34:48:bd:7e:51:39:30:
         b4:53:94:fc:7a:e4:41:a1:28:0c:1c:88:a5:00:99:1b:17:8c:
         6c:9e:f5:46:07:80:10:a2:cb:46:19:f8:58:7c:0d:05:81:89:
         b9:9c:a5:73:bc:1a:73:bf:d1:3d:b0:a2:ac:3f:55:2f:31:09:
         6c:9a:07:95:ed:60:ed:c7:0c:fb:40:f7:bd:bd:21:4e:76:e6:
         7d:61:7e:e8:68:c9:89:9c:4b:53:8b:86:26:fd:33:d7:13:79:
         60:31:3e:50:26:a4:25:9a:20:38:bf:aa:68:e6:20:6b:fc:08:
         5b:55:65:e1:ef:ca:4f:9b:08:f4:3f:7c:7d:5e:be:ab:17:1f:
         d9:f0:a9:8f:c2:7d:f9:d2:2d:6b:6a:7f:f9:24:05:07:7c:08:
         95:fe:cc:cf:f3:63:ba:bb:bc:05:ba:87:11:5a:80:78:57:ca:
         3b:de:67:47:1d:c2:e0:67:12:31:c6:eb:e8:90:d8:5f:a2:eb:
         05:43:bb:9f:0d:ad:a5:42:c9:9d:24:f7:fd:cf:13:73:b0:6f:
         c9:24:79:70:80:4d:20:d8:a0:28:ba:f9:59:5f:a4:8b:e3:93:
         58:50:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:03 2025 by rpki-client