Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa
File:                     b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa (raw, json)
Hash identifier:          vNkSds/KdKFpfkfseGGs938GLeyc4E1pSe3c9SPP0YM=
Subject key identifier:   21:F4:B7:C2:EB:5A:03:49:90:BD:27:84:AC:D4:84:F7:F8:73:6F:EB
Certificate issuer:       /CN=4a595a80-2106-455a-be91-2aa623280126
Certificate serial:       010D0C9F4328584AAE08ED2FDB6F2B267FB6DCE0
Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa
Signing time:             Tue 29 Jul 2025 03:01:56 +0000
ROA not before:           Tue 29 Jul 2025 03:01:56 +0000
ROA not after:            Mon 27 Oct 2025 03:01:56 +0000
asID:                     14618
IP address blocks:        2604:11a0:1000::/40 maxlen: 48
                          2604:11a0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:08:ed:2f:db:6f:2b:26:7f:b6:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a595a80-2106-455a-be91-2aa623280126
        Validity
            Not Before: Jul 29 03:01:56 2025 GMT
            Not After : Oct 27 03:01:56 2025 GMT
        Subject: CN=9d2a6a58-3d25-4721-91f7-51df6b880384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:6b:99:52:a4:a2:98:e0:c1:4c:33:ba:1e:
                    5c:91:bd:23:e2:32:12:6b:70:0e:56:0a:0e:33:db:
                    df:02:a5:fc:0b:53:d8:d0:b6:84:8d:86:c3:95:c2:
                    de:ea:06:10:f8:10:ab:77:bb:3d:4e:86:35:ff:f2:
                    89:99:1b:4a:eb:ef:fa:02:3b:2c:ea:23:f5:32:01:
                    d4:61:6e:32:24:da:0c:7a:ad:8f:31:cd:29:0b:03:
                    20:86:14:2d:90:a6:52:fb:bc:69:cd:7a:c6:0a:f3:
                    34:21:c1:cd:ec:e6:f3:c6:26:0f:6b:3e:f8:b3:41:
                    67:ff:fb:97:9b:2d:1a:a0:a4:1b:b3:af:eb:cd:d4:
                    14:23:e9:d5:a7:8f:6f:fd:47:01:92:68:80:66:63:
                    ff:80:ff:b4:1f:4a:70:29:34:2f:5b:a3:4b:99:2a:
                    9e:1b:3d:c5:c8:c7:f4:6a:0d:93:d1:18:45:82:f8:
                    2b:3f:2b:0e:f1:5a:7c:78:e3:77:b0:ed:72:67:59:
                    c9:bd:46:cb:b4:8f:ac:7b:54:d1:b9:93:14:33:2f:
                    d2:9f:b5:54:12:2e:d4:ac:ce:d4:82:13:e5:3d:33:
                    07:3d:27:56:46:fa:8f:85:2f:5e:74:98:64:0b:35:
                    af:52:0e:34:2a:fa:c7:b5:39:f2:9a:84:f3:66:14:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:B7:C2:EB:5A:03:49:90:BD:27:84:AC:D4:84:F7:F8:73:6F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl

            X509v3 Authority Key Identifier:
                keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:11a0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:a4:a6:04:e4:58:85:0a:16:4b:db:2e:98:10:90:95:a3:
         3f:64:24:2d:f7:de:8c:d1:62:d2:51:53:a2:fa:9e:62:07:f5:
         99:06:b8:9c:59:32:5f:98:f4:16:b0:4c:6a:3f:b7:15:83:ce:
         c0:78:d3:60:77:a9:df:0f:8a:5b:ea:08:a3:2f:17:52:b5:d6:
         56:30:2f:38:de:76:c5:21:fa:94:5a:63:a5:0e:9c:a0:86:5a:
         8e:60:d0:9a:cf:26:2a:7f:88:6f:46:1e:26:a7:19:5d:1b:17:
         2b:38:86:99:a6:51:8c:0b:d7:0e:6e:87:9e:e3:5f:07:8c:1e:
         a0:54:ef:a5:3e:57:00:9f:6c:56:2f:e4:90:dc:ac:b3:94:29:
         0f:c1:0a:69:ea:c8:d4:86:29:a1:c8:27:2b:9b:aa:ec:dd:59:
         4a:e6:bb:41:50:b7:30:5a:ea:47:32:aa:a1:fd:28:55:db:d8:
         12:09:52:ce:84:f4:d3:60:b9:aa:9a:33:c0:43:06:6f:d2:a7:
         3e:a7:af:88:0e:3f:ff:c0:15:52:20:43:36:4b:b5:73:ea:74:
         f2:97:a0:29:ab:23:18:4e:e6:8e:9e:6c:b2:14:04:fe:27:2a:
         7a:6f:ae:91:dd:39:17:cb:c3:1e:eb:37:e2:64:6a:ad:6c:5a:
         51:54:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:42 2025 by rpki-client