Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ae26b84e-7a73-30c4-ad21-72642d7a827c.roa
File:                     ae26b84e-7a73-30c4-ad21-72642d7a827c.roa (raw, json)
Hash identifier:          kngsjyDHhbRYMN9ydPq1tukeEeRn+RRDWQlPF2GV1SI=
Subject key identifier:   17:B1:95:CF:15:BE:C3:0D:98:F7:B7:F9:4B:B2:6E:8D:9A:0F:AA:76
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584A29555D16E87EA33177600C00
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ae26b84e-7a73-30c4-ad21-72642d7a827c.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     1024
IP address blocks:        2602:fca7::/46 maxlen: 46
                          2602:fca7::/48 maxlen: 48
                          2602:fca7:1::/48 maxlen: 48
                          2602:fca7:4::/48 maxlen: 48
                          2602:fca7:5::/48 maxlen: 48
                          2602:fca7:6::/48 maxlen: 48
                          2602:fca7:100::/48 maxlen: 48
                          2602:fca7:f02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5d:16:e8:7e:a3:31:77:60:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=df12e9f9-b5bf-437d-9be4-c7eba851eddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:8f:ac:fa:f1:f1:64:88:80:83:2e:14:66:
                    27:1c:ee:83:39:ae:ee:8f:ea:9b:66:e6:0e:18:16:
                    1d:8c:30:f9:d6:b8:77:33:ef:73:d1:45:4a:4c:cf:
                    bc:02:a5:70:d4:d8:fb:8a:7e:44:89:35:ae:6f:48:
                    e7:86:a5:36:63:f4:64:21:ce:2b:4f:d0:da:90:90:
                    41:c6:5b:36:ba:fd:5a:84:10:e2:d6:3e:01:5e:58:
                    64:9f:de:fa:d1:63:a5:e9:de:ce:56:10:7b:c5:a5:
                    1e:2c:09:bb:ff:41:db:ce:36:6f:9c:a4:3e:f9:a1:
                    ef:33:67:27:d5:9a:88:89:dc:f8:ab:26:d5:77:f1:
                    db:ed:31:d5:06:05:1b:fa:1d:c9:c1:4c:44:a5:5b:
                    7a:61:8e:31:44:f0:12:7c:79:f8:d5:39:96:dd:db:
                    2a:6d:34:3b:ff:e4:fa:85:f5:58:b2:e0:92:07:f8:
                    9f:9c:32:ef:2d:70:99:db:18:db:1c:65:77:f5:5a:
                    9b:21:c9:6f:97:d0:5a:37:ef:8d:33:22:8c:0e:e1:
                    5a:b5:0e:83:61:3e:09:72:54:fc:c2:10:ed:fb:a6:
                    5f:ec:63:20:d9:8c:9d:64:c8:bc:8a:f1:5f:90:0d:
                    0a:9e:b4:6a:12:31:97:11:6e:65:06:fa:e8:69:e2:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:95:CF:15:BE:C3:0D:98:F7:B7:F9:4B:B2:6E:8D:9A:0F:AA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ae26b84e-7a73-30c4-ad21-72642d7a827c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7::-2602:fca7:6:ffff:ffff:ffff:ffff:ffff
                  2602:fca7:100::/48
                  2602:fca7:f02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:cc:44:24:db:5a:b7:4d:34:ab:91:ee:29:88:29:ff:de:
         72:9e:3e:ac:06:44:90:db:0c:7e:d0:14:58:11:9a:1e:2e:69:
         5b:65:5a:9d:a5:34:0a:d4:bd:0d:ac:14:b0:39:db:30:15:23:
         8b:38:bc:78:a7:de:ac:45:dc:1b:89:c5:96:06:6c:1e:78:5b:
         e7:5e:57:59:b1:b0:57:ff:cd:57:d3:b2:1c:59:09:5f:ea:b1:
         91:5f:db:df:a6:ce:26:94:6e:f3:22:c1:57:29:0c:2d:18:51:
         1e:56:e7:dd:ea:4f:2a:53:08:13:91:3a:16:6f:d6:22:0d:d2:
         66:78:d8:64:f8:63:fb:2c:8c:3b:ce:44:92:c5:04:ac:27:42:
         4b:56:dd:fb:92:59:17:d8:f5:c4:ef:2b:0c:33:df:61:70:04:
         bc:39:4b:8f:e6:88:59:6a:10:70:03:4c:ac:bf:a1:57:2d:82:
         d6:c6:5e:9a:cd:47:79:cc:6b:10:8c:20:71:e4:f6:3b:6b:f3:
         79:d5:d2:44:fa:42:1d:cd:df:d1:c1:a6:e3:97:1a:d9:a8:cc:
         8a:91:28:07:20:95:21:a2:2b:5b:60:49:a0:e0:6a:19:d8:77:
         c9:52:0f:d5:c4:1b:39:84:6b:23:aa:5a:62:73:f5:e2:0f:29:
         b4:3d:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:57 2025 by rpki-client