Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
File:                     caf6984a-6241-341c-a03c-38c380834003.roa (raw, json)
Hash identifier:          yGR+HLwYh+fHpA49Z5iK1XO66fiM14U7LwSxehdiXMo=
Subject key identifier:   CD:07:94:45:0B:D3:90:35:65:30:EB:10:B2:68:04:82:05:AE:13:72
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A348020B12EBD43CDA49A2D00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:b1:2e:bd:43:cd:a4:9a:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=beade79a-8376-45a4-871a-a30668616a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:22:01:38:e9:d4:63:d6:b6:fe:7d:53:ec:
                    ce:f6:e2:fa:6b:15:1a:26:d8:3d:d4:18:3d:8e:ec:
                    6f:5c:46:f5:76:ee:4d:7b:ea:c4:0e:7c:51:24:21:
                    0a:a1:1d:cf:c1:35:98:73:89:ae:ad:6a:96:db:73:
                    d7:ba:6e:62:f8:65:b0:e3:31:88:9a:e4:91:08:5f:
                    f8:78:ae:e9:f6:6a:d1:8a:9d:a9:84:45:04:15:48:
                    50:76:ab:b1:51:60:be:ad:53:54:85:11:20:a8:cf:
                    60:7a:b1:9f:2d:8a:9d:fb:a6:d2:66:6b:b4:35:ae:
                    45:95:66:a8:29:e8:37:4a:00:e8:16:d9:ee:af:1b:
                    d9:22:7d:dd:03:65:5d:ff:7b:30:5b:ea:25:0a:a5:
                    82:be:f8:4d:62:c3:4d:59:f1:ac:28:75:da:e5:c5:
                    77:88:71:62:67:4f:b3:34:87:e9:7a:86:7f:ac:91:
                    0d:4b:df:cf:94:83:47:6e:f1:e1:f8:db:69:ce:8a:
                    f3:e4:d9:ce:1a:82:e5:72:b9:36:25:94:1a:f6:17:
                    4d:e7:a5:74:2d:0b:e6:57:e5:d9:f1:cd:40:06:75:
                    fb:cf:38:65:87:63:08:86:b0:e7:b2:04:eb:0c:9b:
                    be:fd:8e:77:bd:9d:d2:4f:62:d5:a7:85:aa:26:f9:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:94:45:0B:D3:90:35:65:30:EB:10:B2:68:04:82:05:AE:13:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:57:5b:9d:b4:12:e2:3a:8c:b1:15:48:b9:9a:50:3b:3d:
         4f:cd:af:71:f3:b1:97:c9:77:b9:f2:31:e5:df:7b:75:7e:1a:
         c1:ee:e9:6f:6f:98:90:76:c6:8d:b7:f5:3e:2f:ef:a7:f1:d4:
         46:19:cf:45:2e:af:da:56:fb:f9:fd:69:76:14:a8:78:48:f5:
         ea:34:7c:36:9d:ef:32:69:f5:75:71:c1:48:f7:c6:1d:95:3f:
         82:3e:ed:68:26:f1:b2:19:2a:8a:c2:97:f1:38:c5:d6:e7:e2:
         71:7d:02:ba:04:28:48:a4:ba:92:5d:11:61:fb:f2:a1:07:e9:
         2c:85:ea:f0:6d:f2:15:02:ac:f7:df:d1:51:ce:5a:27:32:2b:
         b0:33:47:a2:32:f6:cc:e9:c8:af:07:81:ab:db:34:8c:85:72:
         8f:70:51:55:62:c0:0e:34:14:f6:00:e0:07:b3:ea:48:07:dc:
         2f:d5:58:f0:c8:1f:33:02:1c:fd:52:12:fb:aa:9c:a4:6b:a3:
         5d:10:53:33:4d:ae:24:b4:8c:91:7f:ad:df:72:08:63:cf:5a:
         35:fd:11:34:96:30:58:ac:4e:d4:0a:ca:0c:9b:e3:b1:28:8f:
         8a:0f:33:7f:43:9a:50:d4:97:31:21:fa:34:ef:27:b7:55:4b:
         63:8c:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:55:27 2025 by rpki-client