Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
File:                     a31500f4-cfd5-3cea-b888-2f24641d721d.roa (raw, json)
Hash identifier:          7AviEAOReD+8elNfubh61+TPpVAsBWSMN4je1QALTf8=
Subject key identifier:   50:11:0E:17:AB:E8:8F:85:9F:5C:A8:CB:76:2B:A8:6E:56:84:A6:DA
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584A629094488C8AFD5085F7B446
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2620:135:7017::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:94:48:8c:8a:fd:50:85:f7:b4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=129b8fee-2743-463d-9ba2-4026fd58fc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:19:f4:9b:10:4e:93:f8:43:cf:b2:31:37:
                    f6:fd:c6:f4:40:53:5a:77:0d:b8:cc:74:7d:ea:d1:
                    e5:dd:ba:29:20:d3:89:ee:79:f2:7f:51:2a:1a:da:
                    1c:ca:49:d2:ad:d8:8b:99:60:36:34:76:6a:1c:d7:
                    fb:4d:38:5c:31:db:f8:b9:53:95:6e:38:30:e1:72:
                    71:d3:e0:d4:89:ec:ec:f7:8f:36:0c:fe:d0:16:50:
                    1d:d5:5d:03:b8:51:65:e7:84:26:78:43:03:1c:6c:
                    0c:e0:45:47:f3:8d:1c:ff:72:da:51:7d:fe:40:7e:
                    f4:b8:02:c8:e2:69:a7:a2:ae:d4:80:1c:9a:01:a3:
                    27:3d:c8:6a:35:dc:28:0f:ca:4b:d2:b3:89:c6:39:
                    ac:fe:59:86:5a:33:a5:55:32:20:7d:17:27:08:7b:
                    67:22:cd:8f:42:47:ba:6b:71:bc:9a:4b:fd:d3:69:
                    6e:94:45:0c:ab:fb:75:92:73:2f:11:cc:2b:66:35:
                    4c:02:88:1b:d4:a3:5d:5d:54:71:b1:cc:08:49:ff:
                    1e:d7:55:8d:b7:2e:fd:61:4a:a1:aa:f6:81:25:07:
                    a2:b5:7f:2f:85:43:cb:59:56:48:ac:51:f1:4f:01:
                    e9:a8:40:23:dc:54:93:a4:23:0f:14:b7:6e:9d:b9:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:0E:17:AB:E8:8F:85:9F:5C:A8:CB:76:2B:A8:6E:56:84:A6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:41:4a:de:3a:92:c3:4d:4e:b9:d5:b1:95:f3:8f:b3:15:
         ae:90:80:c8:5a:41:24:49:d7:a3:98:ba:23:7b:82:88:12:1d:
         5c:00:96:a9:57:f6:26:49:a0:8b:67:bb:a3:88:9d:96:18:a3:
         6c:68:89:22:56:89:6d:ba:29:85:20:a7:75:e9:2f:26:b8:34:
         19:75:51:29:d2:d4:0e:38:fb:ab:b8:01:90:ca:31:14:66:61:
         7b:f6:b4:3c:fb:d4:66:b1:24:6e:8e:aa:e7:70:ed:b2:35:a5:
         8e:84:20:fe:3d:3b:53:b2:e2:39:6b:c0:a2:a2:e7:da:c9:94:
         61:98:82:dc:cb:ec:96:7d:30:b0:5d:26:1f:f8:a8:21:b7:a8:
         34:21:87:ef:ba:14:a1:7a:c3:d0:62:1a:5c:61:55:b5:e2:38:
         71:c8:1a:ef:5c:7f:7e:9f:ae:02:2c:db:9d:c2:44:1b:8e:27:
         98:1c:06:4e:d3:e5:91:71:a6:b5:3b:45:ff:13:dc:44:cc:a9:
         60:b3:f5:5e:39:d9:1f:45:db:ff:69:d5:76:85:52:34:e3:c5:
         67:a9:fc:1b:b5:6d:ff:23:4c:c6:19:4b:8a:34:bd:e4:f3:ad:
         db:7f:0f:75:6e:ce:30:c3:e1:d2:0d:86:bc:1b:6b:06:06:c3:
         1b:3f:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:46 2025 by rpki-client