Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
File:                     5987ee65-bf63-3846-a21b-41263b681a6b.roa (raw, json)
Hash identifier:          lc87VhrZpnt3tzCTebkUdPWxndK7lkSF8W9K3cncq1I=
Subject key identifier:   65:4C:18:C5:C1:8F:90:F3:B6:39:66:CB:E8:16:ED:92:A1:4C:A4:A2
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584A90A0C5054D2C87865F9A1E80
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     19518
IP address blocks:        2602:2e5:666::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c5:05:4d:2c:87:86:5f:9a:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=94ca1939-afa8-4707-9cc8-e64864c1b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:f4:00:c0:86:80:0b:eb:d9:4d:92:42:ef:
                    4e:dc:7f:04:57:85:bf:7a:91:49:24:67:44:80:e5:
                    aa:e2:10:25:64:d8:e9:2c:98:63:4b:f9:b9:65:2f:
                    74:cc:18:a9:b0:c3:18:b8:8c:c0:67:2e:cc:f9:e2:
                    ac:3b:03:80:1a:4d:82:cf:ad:c2:82:91:e0:c1:b9:
                    1f:0a:b8:14:59:c7:09:e7:94:a0:5c:9d:89:34:40:
                    4d:b3:e3:36:41:c1:60:45:d6:fa:09:05:a2:3f:40:
                    42:4a:76:43:1a:34:ff:1c:4c:1c:9a:3f:5f:81:03:
                    cd:0a:12:be:d0:2e:02:0c:a5:36:79:5c:26:00:6f:
                    e7:43:18:60:bf:f0:b6:1c:29:1e:b3:59:02:2c:e4:
                    46:92:b1:89:99:6d:47:bd:a0:72:e4:74:10:b9:eb:
                    94:b3:35:2a:d2:c0:18:ec:ed:94:92:3e:05:58:a6:
                    b7:8e:49:04:2a:be:f5:2f:ea:ab:c5:ab:aa:42:ed:
                    84:d6:4a:e2:7b:8a:2c:1a:12:b0:8c:16:ce:f8:5c:
                    11:38:08:bf:49:24:2a:7c:86:dc:5f:89:27:fa:17:
                    ec:9f:82:ef:86:80:a4:d4:50:6d:d8:7c:2b:b9:14:
                    40:a9:3d:9f:d4:09:7e:87:9d:0b:f6:94:33:46:66:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4C:18:C5:C1:8F:90:F3:B6:39:66:CB:E8:16:ED:92:A1:4C:A4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5:666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:ba:81:23:5e:c8:3b:97:d2:f6:dd:0b:93:40:b6:06:5e:
         f3:f0:5b:97:02:fe:cd:3c:6a:21:a6:b0:33:85:28:09:c8:20:
         8c:f1:62:05:35:2b:3e:d3:e3:a0:08:89:6e:63:7b:d2:1f:b3:
         a5:03:62:54:64:b5:39:3c:28:87:16:2d:c4:68:d0:ed:68:a6:
         16:c4:30:28:93:b6:9e:2b:e4:14:e5:6c:4b:90:fb:10:57:4c:
         67:4f:a9:d2:c8:7d:92:c8:12:a4:e1:1e:fc:24:8a:0e:3c:b7:
         96:73:e4:34:9d:fb:cc:2f:3c:b6:06:2e:2c:ea:a1:2d:a0:bc:
         08:fd:58:ca:36:28:30:ea:3b:ad:bb:e4:71:b8:4e:6a:34:c0:
         b5:88:b0:7f:da:00:d2:00:ab:e8:9c:b2:8a:df:7b:18:95:97:
         f5:8f:d9:76:e5:c2:df:8c:75:7c:cc:50:72:5a:81:09:d8:a3:
         a2:fc:be:4f:05:a7:8c:59:dd:da:f4:0f:cb:93:fb:d9:da:40:
         25:ce:07:4a:cb:a3:f0:50:10:1d:27:fe:2d:6d:af:e0:7b:18:
         3d:b7:c0:28:37:49:3b:01:f7:b5:af:5d:07:78:ce:5c:8b:b4:
         d7:4b:bf:0f:27:0b:48:92:d1:78:d4:f8:38:5c:79:7e:17:2a:
         10:f6:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:37 2025 by rpki-client