Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
File:                     f9457e98-5423-3f04-90ee-67760a3cd563.roa (raw, json)
Hash identifier:          mhEHHEqF4t/ilXiK2veB6GRxhWYwcwENbrNZnFNMdK8=
Subject key identifier:   81:94:F1:61:24:38:08:4C:C8:FE:D2:66:C0:38:44:4E:B3:34:9B:1F
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584A5FC5EBDE7564111F5A0AC3E0
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     63150
IP address blocks:        2602:f988:40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:eb:de:75:64:11:1f:5a:0a:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=9fbed490-53b3-48d2-a57f-71f4b96bca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:76:e9:04:2d:6f:73:ae:e2:f7:d2:18:d7:
                    9c:a6:ac:e4:ec:b1:c6:12:d1:7f:3c:f0:5a:8e:ea:
                    ec:91:72:65:8f:45:20:4a:7d:5c:a1:bf:15:4f:9d:
                    a1:1c:e1:3f:f2:3b:24:4d:45:1b:94:e9:98:83:0b:
                    24:a8:ce:f2:68:2c:c0:c5:c6:c4:a2:85:98:ca:28:
                    e5:bb:0f:09:b6:a7:35:66:4d:71:bc:74:bb:7c:ba:
                    5b:bc:be:94:63:f4:e1:a6:fd:d3:ad:3a:a9:77:46:
                    aa:16:43:76:f7:6c:60:5a:90:f8:d5:44:c1:3e:8c:
                    69:af:cf:a2:43:38:2d:bb:12:3e:e8:f1:e0:32:bb:
                    f2:f8:07:2f:af:72:7b:f1:6b:f5:97:e8:b0:62:1e:
                    f6:ba:6b:05:81:72:dc:c3:7a:7f:a7:56:89:34:11:
                    51:59:2d:ba:ea:eb:f0:3a:ff:bb:c5:f1:66:3f:53:
                    7a:94:bf:b3:f3:64:1e:df:ec:6c:69:c9:8e:a2:cd:
                    cc:e8:5d:11:83:11:d2:53:4a:04:79:ee:d3:ef:e5:
                    45:d1:1c:23:7e:ba:1e:2c:c4:bd:9e:07:56:53:ff:
                    46:97:0b:8e:60:b0:90:2f:41:37:ee:b5:af:6e:5d:
                    87:3d:41:60:7d:8e:0d:89:2c:41:8e:91:bc:20:ca:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:F1:61:24:38:08:4C:C8:FE:D2:66:C0:38:44:4E:B3:34:9B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:11:1e:55:7a:06:d7:b4:83:53:2a:79:c2:4c:68:a6:97:
         d4:a9:42:25:15:9f:dd:10:65:cf:36:2b:20:7e:06:2f:06:f2:
         8f:10:f6:3a:b2:f3:43:42:d7:79:d8:ed:d3:8b:66:e8:da:eb:
         c5:d2:49:e9:94:2d:49:ab:e3:b9:d3:6c:cb:eb:a0:06:75:98:
         d3:ce:40:b6:54:9e:ab:0c:17:c7:ac:8d:ae:d4:e9:bb:93:98:
         53:9a:3f:1d:2c:ad:94:f6:4d:55:f9:95:87:93:83:44:99:27:
         47:a0:c6:77:14:44:e3:64:1d:01:02:86:7f:91:b6:a3:1c:07:
         96:f2:db:54:85:b8:c3:ab:25:81:34:9f:e0:a5:47:b1:6e:0f:
         35:63:45:ea:fb:4e:4f:9c:dd:4f:26:60:12:0a:6a:e6:30:6d:
         96:33:3c:34:fe:62:f0:38:30:77:13:c1:39:2e:18:6a:f4:44:
         37:dd:48:90:31:fe:d8:52:bb:98:68:85:91:1c:12:ff:de:04:
         aa:f3:94:f8:e5:39:59:6a:fb:62:f7:e6:92:c0:a1:b8:69:27:
         a9:fa:59:91:f2:c0:60:7d:fc:72:4c:cf:e6:c4:f7:62:54:3a:
         f9:d8:64:ae:43:03:1d:85:88:69:68:39:85:a5:55:f1:4a:1f:
         dd:1d:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:26:07 2025 by rpki-client