Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa
File:                     8837e8c6-7fcc-3a65-881a-18177bad0061.roa (raw, json)
Hash identifier:          oHzmOMyr3rzacHowPdsRJpJ//dwrROmI7pW7oKBxy6k=
Subject key identifier:   FD:13:56:2C:9D:9A:A9:6D:90:97:32:E1:48:49:4E:23:47:10:25:68
Certificate issuer:       /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
Certificate serial:       010D0C9F43285849F9DFD3E6FFD95702B3B69300
Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     26459
IP address blocks:        2602:815:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d3:e6:ff:d9:57:02:b3:b6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=e0bfef8a-f6ba-4fb5-8fc0-5fe52e2b2249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:dc:3f:46:73:d2:be:75:b6:ef:7b:c0:61:
                    d8:ca:e8:81:93:2a:ff:7f:bf:08:62:cc:a3:6e:8e:
                    85:0e:2e:f8:aa:0d:d6:fe:95:b1:0b:a3:cd:c8:df:
                    6a:ec:18:23:46:86:8c:35:8d:b7:04:53:bc:b4:28:
                    64:a9:50:8c:db:ff:4b:06:13:d5:4d:ce:dc:5b:a2:
                    32:81:17:ff:d7:20:22:8b:03:44:8d:98:95:ec:eb:
                    7d:e5:79:d9:a2:2d:4d:0c:65:08:99:4f:b6:5f:62:
                    7d:9e:06:f4:4d:f4:bd:e8:1e:e5:ae:e7:00:e0:90:
                    08:11:f1:8e:af:63:13:32:fc:5f:ba:95:c0:f1:64:
                    97:ab:4b:e2:fd:67:3d:bf:dd:97:b5:33:69:f6:c5:
                    e2:3f:ed:52:10:73:b0:0b:d6:11:67:4f:28:72:21:
                    37:39:48:9c:d5:3d:51:88:89:c8:29:5a:c8:04:b5:
                    40:82:9e:0a:cf:d2:3d:0c:0a:7c:cd:00:48:3f:1a:
                    e6:45:e6:c9:bd:b0:4b:c6:a9:54:4e:a0:97:41:a6:
                    7f:19:3a:c3:13:e2:7d:51:47:dd:fa:eb:be:a3:4c:
                    5d:13:42:ca:3f:98:52:13:c4:83:18:0a:d4:37:ce:
                    79:5c:17:87:30:30:38:a3:bb:ca:1c:db:4a:0b:68:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:13:56:2C:9D:9A:A9:6D:90:97:32:E1:48:49:4E:23:47:10:25:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl

            X509v3 Authority Key Identifier:
                keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:04:cb:b8:b5:33:1c:b4:40:b2:d3:e2:8a:39:99:5c:b9:
         e7:ee:fd:16:d6:5d:ac:82:91:d6:28:64:9e:b2:e1:f5:ee:4d:
         50:d7:ae:89:6c:30:65:29:98:aa:c2:1e:c0:41:52:7f:34:d8:
         38:54:fd:5e:48:27:9d:bf:03:ea:b3:d5:7f:12:ee:42:45:8c:
         56:f6:7b:af:93:c3:cd:13:3c:7b:1f:12:af:d7:79:45:88:ff:
         63:23:3f:35:18:65:f2:32:c8:61:a0:0e:19:46:79:27:dd:2b:
         34:8c:a0:b9:14:8b:ec:0d:72:43:b5:fe:a1:d0:21:76:46:0d:
         2d:e5:03:65:88:f0:0c:13:7e:70:c6:4e:7d:3d:ba:4a:43:ae:
         b9:9d:60:e7:84:86:92:1c:39:99:d5:af:7d:cd:43:ea:9c:f8:
         e6:eb:26:33:09:2a:7a:69:fe:40:db:7f:67:30:83:86:a7:50:
         db:89:54:0a:fa:b7:c0:ec:1b:b7:05:ec:71:2b:7b:e2:07:78:
         4e:60:c4:52:15:9b:a9:42:db:8a:2f:dd:dc:3a:34:bb:c5:15:
         2b:36:f4:ab:93:c3:20:86:99:a5:98:eb:7f:70:0a:25:00:36:
         1b:82:f2:98:41:84:c4:13:a3:72:97:66:ff:ee:87:9d:4d:60:
         2c:e6:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:40 2025 by rpki-client