Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa
File:                     4e0119ee-0f0b-34d4-8600-07960abfc65c.roa (raw, json)
Hash identifier:          stT598f2vzXbCxQPvUF5OMPQk9biLO2eU80hE7ifwvw=
Subject key identifier:   EF:10:A9:BF:35:8F:A7:2D:B8:67:17:AB:01:D0:2B:53:90:AD:A0:E1
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F43285849D85F7C4C3EDF2178CFE57300
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     10126
IP address blocks:        2606:c00:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:7c:4c:3e:df:21:78:cf:e5:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=254c0bc3-7738-446c-b9d6-c52132f9f341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:e5:de:fe:b2:58:90:0a:11:8f:f5:27:b3:
                    c6:e7:d3:8a:ca:1e:d0:a8:9a:f1:71:6e:5b:da:89:
                    05:39:ee:e9:e1:c3:bb:71:49:6b:25:70:3c:fb:c3:
                    0d:ef:d0:38:dd:ff:67:fa:c6:d5:d6:f9:28:79:77:
                    42:cd:15:3b:94:05:46:d6:17:4a:31:65:65:c7:00:
                    99:fe:f1:6a:ee:63:03:a2:53:55:21:92:9e:8f:80:
                    a2:a7:15:82:31:11:28:41:7f:91:00:da:65:16:6f:
                    60:f3:8e:28:7a:69:81:c2:fc:2d:ed:b2:41:d2:e7:
                    d7:c7:2e:e5:b3:e9:fd:87:de:f5:7f:78:4a:74:ca:
                    9a:9f:b8:d4:53:bf:e3:48:4d:15:72:7a:e1:8d:9b:
                    87:75:9e:50:aa:84:fb:14:39:85:c7:f2:1a:f3:0f:
                    66:4f:f1:94:b9:31:6d:86:23:da:28:12:2f:89:fb:
                    87:34:38:a6:4f:8f:2f:ad:1d:b8:af:f6:f5:59:9e:
                    69:c4:65:50:12:ba:90:11:82:7c:cd:93:4c:ad:d1:
                    b9:09:dc:ba:da:7e:c6:96:41:21:f9:ff:61:41:fa:
                    95:37:fe:28:09:2c:8d:b6:76:9f:ee:52:01:74:f2:
                    d4:90:87:98:98:a3:53:7c:05:ca:af:54:d3:0b:2c:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:A9:BF:35:8F:A7:2D:B8:67:17:AB:01:D0:2B:53:90:AD:A0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:07:e6:a9:81:d4:b4:ae:30:bf:a0:b1:cc:1b:24:55:c0:
         c8:61:48:60:64:18:e0:9c:e2:55:a3:fe:a8:dd:2f:a9:29:87:
         0e:d7:aa:0d:bd:cc:82:53:94:5f:0c:11:b6:7f:d1:95:7e:ea:
         38:74:3c:f1:3b:c2:ed:0d:bc:d6:3a:f7:df:41:fb:22:6a:21:
         e4:02:de:46:82:e9:9b:46:52:03:cb:e8:15:b7:7d:a2:d9:e1:
         a8:4b:64:c2:10:7f:7b:6a:4b:2e:97:ad:00:c5:7b:07:bb:ff:
         17:5d:35:33:ed:d2:cf:b0:81:42:d9:f4:1d:ad:d1:d2:ce:8f:
         6d:38:b8:ad:e4:49:d8:92:e0:9d:b4:73:d8:18:75:82:20:88:
         ee:d1:76:93:3a:f2:90:65:5d:51:08:86:63:61:ce:e5:66:9a:
         e6:e9:4d:4c:5d:d7:ae:a5:a0:d4:4f:db:9e:f4:6b:a5:96:06:
         19:d0:ad:77:e1:a3:b0:32:30:90:33:cc:e2:a7:61:4f:2a:d4:
         17:82:57:e6:86:16:a9:cb:26:ef:25:ee:1f:d9:e6:b2:ff:0c:
         51:df:82:c0:96:51:e3:71:0c:04:85:3d:1f:ff:44:41:20:19:
         15:40:15:ea:e5:24:63:e7:97:07:11:11:73:a2:58:c0:ef:66:
         f9:05:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:35:46 2025 by rpki-client