Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa
File:                     52aea1c3-1797-345f-a6ba-6bdb55455530.roa (raw, json)
Hash identifier:          +MWKIiMuA/GTsy+EAZStQXYFGlIqPyt5J8hixFEkySA=
Subject key identifier:   1B:63:9D:23:0A:11:D6:A7:5C:64:7B:51:CF:08:77:18:9C:54:69:C1
Certificate issuer:       /CN=9945234d-5624-4733-92d1-ade3a2f33d87
Certificate serial:       010D0C9F4328584A6825F85798FEC5C371396100
Authority key identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397614
IP address blocks:        2602:800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f8:57:98:fe:c5:c3:71:39:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9945234d-5624-4733-92d1-ade3a2f33d87
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=de5f16bd-9b19-4dfd-a2eb-c952f99402e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:e4:09:15:f3:ba:8a:48:0e:24:71:27:67:
                    9b:7d:63:69:96:01:70:d1:54:3f:3c:f2:d5:41:12:
                    9a:df:fd:38:79:7c:1a:be:e1:13:cf:f8:5a:b2:b8:
                    d8:9e:65:b1:5d:89:36:a2:b5:19:81:5b:66:9d:97:
                    1f:57:37:d9:89:8a:50:a0:6b:df:9b:6c:b3:ea:b6:
                    1c:0a:60:80:28:04:ee:1d:3c:ff:5a:20:24:13:d3:
                    f0:0f:88:c3:f7:aa:21:b2:32:8d:1e:cf:52:78:96:
                    21:da:ca:3e:cf:d0:8d:09:53:d1:e3:1e:c8:0f:3a:
                    27:e8:2b:13:3f:9c:6d:ea:5c:8a:b1:dc:0e:f5:23:
                    24:d6:a7:ec:2d:ee:b9:9d:63:e8:ef:80:e2:c1:16:
                    b9:5b:f3:4d:77:82:28:02:a9:4f:aa:6b:92:9b:70:
                    2e:6c:e3:f3:fa:4d:d2:49:c9:85:c5:67:dd:62:08:
                    dd:9f:0f:77:94:a8:cc:fe:1d:e3:b5:e5:70:1f:cf:
                    66:08:f5:b0:98:5c:de:5a:0d:ec:1d:9e:55:3e:40:
                    c2:9f:f3:2e:a5:c1:91:a7:f6:12:a8:09:d7:2e:52:
                    75:c9:65:2b:ad:f2:6f:5c:06:2f:61:b7:48:7a:c7:
                    10:96:60:9c:e2:91:89:02:20:2e:95:3b:93:05:b3:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:63:9D:23:0A:11:D6:A7:5C:64:7B:51:CF:08:77:18:9C:54:69:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/52aea1c3-1797-345f-a6ba-6bdb55455530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl

            X509v3 Authority Key Identifier:
                keyid:D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:bb:32:b7:09:04:28:61:4b:61:51:46:e1:83:58:ac:1c:
         d0:bd:08:ec:52:44:9d:54:8b:07:d8:1c:7c:20:4d:4c:9a:77:
         5d:b3:3a:6f:0f:b7:ea:4b:0f:fc:49:ec:60:13:19:a6:5a:fe:
         37:03:87:7e:a6:d4:83:bc:ab:45:a1:4c:59:32:d1:e2:c9:0c:
         32:2d:69:ba:e1:7c:85:df:cb:b8:e9:27:80:dc:e2:2b:2c:ed:
         5f:10:13:e8:45:1d:e1:09:03:a7:72:31:73:dd:de:73:79:90:
         35:76:d2:06:cf:15:35:ff:54:12:25:b4:56:50:f9:35:68:40:
         94:1f:90:33:e9:2d:b4:46:3d:7c:b0:df:2d:a2:59:a9:01:a7:
         ce:7d:2d:05:65:b9:be:c7:75:b8:4a:a4:4c:49:8e:e3:a7:19:
         b9:67:97:01:06:29:5a:39:8a:12:67:77:69:d8:bf:95:87:bf:
         fe:61:11:cd:f8:ed:be:63:94:56:f5:c1:68:a4:a0:22:a8:e0:
         94:ea:2b:d6:61:dd:8d:74:cd:c2:63:df:27:e9:7f:c1:de:2b:
         af:d7:e5:ed:b1:25:16:07:01:d4:84:75:ba:e1:35:07:6a:a5:
         2a:92:0e:02:68:b8:d8:56:23:83:fc:43:b3:ca:96:22:cf:44:
         7d:08:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:03 2025 by rpki-client