Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
File:                     c625fd72-037d-34e0-acb3-3db086a6a8b9.roa (raw, json)
Hash identifier:          w+xu2mLcY8xi7zE8Q9DCaknVpHmovnWq4J3MYVKlous=
Subject key identifier:   32:40:5B:2D:F8:DC:68:79:6F:F2:64:5A:08:48:14:6E:27:4F:93:E0
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A348020BEB66647746CE9A480
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:be:b6:66:47:74:6c:e9:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=9fb7daf4-d745-4756-885f-e592e48a1493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:64:a2:fc:62:67:3f:5d:18:07:31:bd:8d:
                    57:fd:55:55:1c:b9:b6:9a:a4:51:e7:b0:cd:ab:ee:
                    93:f5:4d:a0:3a:bd:aa:4d:c8:28:8e:3b:27:d3:af:
                    13:ba:ca:a0:90:05:d5:aa:a9:0a:e0:8f:78:56:2f:
                    51:aa:5a:ae:48:98:ae:1e:a4:6a:b8:60:70:65:fa:
                    89:88:34:24:0d:f2:f0:a6:a1:56:23:cc:76:e8:ce:
                    c6:15:e2:2c:57:9e:34:d1:3f:06:3b:67:17:50:c8:
                    33:36:e9:a9:d5:b6:4e:fb:c3:96:cb:f9:59:54:a2:
                    2f:db:c1:d5:92:c1:32:cd:9f:43:3b:25:cf:b8:59:
                    a5:a3:b6:4e:6f:09:03:1d:a0:40:18:69:26:46:58:
                    c7:86:be:af:00:89:5b:2b:ab:c4:90:15:5a:7b:84:
                    21:c4:d9:6e:17:9c:e9:b4:11:5b:a7:f8:34:3d:55:
                    e4:ad:70:92:07:f0:f0:9b:d7:8d:6a:b6:94:50:2a:
                    77:4d:3b:45:ac:3a:f3:45:6b:71:5e:e4:ae:59:8c:
                    79:62:86:69:27:48:af:8c:3b:8e:94:1b:86:9a:ef:
                    0e:dd:5c:54:a3:bb:39:62:59:54:64:2a:c5:a5:90:
                    26:24:b9:c9:3b:88:51:8b:86:35:0f:ba:1e:c8:da:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:5B:2D:F8:DC:68:79:6F:F2:64:5A:08:48:14:6E:27:4F:93:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:2d:e1:12:85:a7:c3:22:f5:d8:fa:31:61:dd:41:ca:c8:
         24:b2:c9:14:80:b1:31:ee:83:e1:c4:bb:b8:33:8f:9a:bc:9f:
         94:85:fa:10:88:b6:46:cc:68:2e:88:ff:5c:73:f8:09:55:0b:
         74:4d:27:22:6e:d5:76:e2:95:48:05:a9:63:0e:40:71:78:12:
         38:0a:01:6a:c8:f6:d6:e3:a9:76:91:a5:9c:cb:bd:cb:04:f6:
         0e:42:87:07:5d:15:68:5e:bc:96:60:92:7a:41:7e:7b:1a:6e:
         a6:68:03:03:62:da:b0:17:2a:2f:06:55:87:53:33:97:de:33:
         76:39:55:1d:a0:72:5e:49:5e:2a:bd:b2:3a:84:7a:a7:5f:94:
         b2:30:68:06:1a:f5:b3:00:31:6d:6d:f1:93:3c:d8:14:b3:1c:
         19:cb:ef:12:65:88:ba:f8:1d:e8:68:2d:82:7b:be:27:97:c0:
         42:6d:66:2d:67:dd:35:6e:d4:28:ac:84:1d:5f:ad:e7:da:bd:
         41:55:a5:18:c9:38:40:3b:34:ba:da:01:7c:d3:b0:c9:d0:06:
         c9:4d:16:90:84:b5:94:7d:4a:d4:69:66:7c:43:6d:3e:df:7e:
         8e:43:24:e8:81:45:58:b4:f9:bb:b3:0a:70:d2:0e:0d:86:d8:
         27:b1:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:15 2025 by rpki-client