Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa
File:                     5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa (raw, json)
Hash identifier:          rHcuRigWJ/PbVLuhXVFjmfwXuUScMMX+YqlPEr67XiI=
Subject key identifier:   CC:44:85:F4:6D:BD:1D:97:77:6D:A3:30:E8:40:BA:A8:CE:27:5E:D4
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A348020D1AD62B8D6D0722640
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:d1:ad:62:b8:d6:d0:72:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=ba167c37-ba30-4eaf-870e-0e42bbb3ba3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:8b:a7:89:26:94:9b:cc:19:19:5f:b2:b4:
                    a3:a9:fe:09:bb:17:1a:6b:9b:a7:97:9f:f4:77:c3:
                    1b:11:c1:23:c0:90:fe:97:b3:8f:7e:55:43:b1:72:
                    a3:ba:cf:ea:48:72:17:ec:8f:9b:37:d9:1d:5e:d4:
                    17:e4:0d:7a:f1:87:bf:4d:95:0c:1b:14:e0:cc:de:
                    28:6b:95:0a:83:4c:e5:09:66:67:79:1b:f1:ad:9a:
                    c7:53:b7:4b:a8:64:67:10:65:01:ff:2b:40:bb:0c:
                    99:1c:c1:37:d9:87:8f:5b:44:84:83:ce:2e:f4:2f:
                    7e:1a:85:2e:ac:86:30:1c:bc:16:7a:d9:ab:4e:12:
                    83:cb:aa:ad:40:4f:0b:e3:1b:8a:e4:02:2b:53:e2:
                    0a:eb:b9:07:8f:26:c6:7a:55:9a:3e:5b:af:d1:19:
                    31:f8:55:ef:ff:13:bb:7a:90:8a:26:ff:42:8e:d6:
                    26:9a:9c:b3:8b:f0:96:f9:fb:a3:36:28:af:0f:a2:
                    fd:26:52:58:c4:84:fe:26:80:0e:7b:86:d4:10:21:
                    6d:02:46:02:6b:b8:43:71:27:e0:93:6a:28:5a:f0:
                    96:37:f1:b0:4a:d4:94:69:d4:7d:e1:3d:2f:56:42:
                    61:c9:a7:47:da:5c:c2:d4:d1:93:52:02:b1:08:16:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:44:85:F4:6D:BD:1D:97:77:6D:A3:30:E8:40:BA:A8:CE:27:5E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:8c:25:32:ce:72:09:d5:3d:d4:b6:dc:3d:36:99:32:c5:
         94:74:3c:0e:7a:11:69:30:5e:36:cd:bc:e1:52:64:f6:7b:ba:
         35:3e:d8:f2:c7:fe:fe:6c:b8:fe:6e:70:f3:78:50:30:01:34:
         14:46:ba:10:19:f6:06:b6:43:0a:53:2e:24:70:ac:1d:65:e5:
         bf:cc:f4:03:fb:19:a4:52:e1:b9:3b:30:8f:e8:3d:9c:cc:97:
         40:9e:ad:cf:41:77:36:d8:1d:ca:1c:03:cf:4c:2f:fb:65:fc:
         08:a2:d0:43:54:c7:3e:c4:06:4c:ed:e1:37:67:f4:69:10:5c:
         e4:f2:74:3e:6f:23:26:bc:bb:e4:91:31:f6:b4:47:e2:70:78:
         3d:c3:d2:94:a6:2c:c1:27:53:8e:e2:12:46:03:26:94:d7:4d:
         80:ab:cf:b0:8e:19:4f:ea:ac:f7:9f:38:83:c8:d9:ce:45:ef:
         e4:9d:ea:f0:eb:8d:be:3c:06:f2:a9:03:ff:b6:de:08:94:54:
         45:68:03:34:af:9f:29:c3:8c:74:41:09:f7:9b:91:af:54:4b:
         b5:c6:d1:a2:03:ff:ba:10:84:3b:62:2d:0d:6d:09:37:29:f6:
         a7:54:7c:41:31:ea:1f:36:62:fa:75:8a:b0:6f:3c:0a:b8:fc:
         e7:52:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:26:32 2025 by rpki-client