Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa
File:                     f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa (raw, json)
Hash identifier:          GpF5QKtwNAepi2RxNNNyNgH69gTajGHecVYWtAHuNoA=
Subject key identifier:   A2:10:00:60:43:84:83:52:0D:61:32:D4:E8:C1:F5:6B:96:63:CC:91
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584AC87653B52FA23AE81F15AE80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     61317
IP address blocks:        2604:4500:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:53:b5:2f:a2:3a:e8:1f:15:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=d9395eb1-7ce4-4617-8981-74713baa8e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:be:57:3b:b5:27:ec:25:46:49:40:81:e2:
                    02:db:b8:9a:1f:0a:47:7f:85:98:a0:14:5e:c8:6b:
                    cb:c4:f2:08:27:d3:de:db:ff:6c:f1:3c:b3:d3:1f:
                    8a:6b:76:d3:ec:96:1a:33:59:83:7d:30:63:aa:61:
                    b9:28:13:04:0b:68:e2:16:a8:71:76:ac:74:70:b4:
                    e0:a5:b0:ad:b9:fb:66:3b:51:84:44:91:dc:23:44:
                    8a:60:71:d5:74:06:34:85:35:70:c0:52:dc:8b:0e:
                    87:22:02:15:71:a1:92:27:be:74:f7:ff:af:34:21:
                    3b:a9:b2:5f:43:d2:c2:a3:75:b7:38:56:58:4b:cd:
                    18:8d:29:00:f6:9f:e3:87:2e:a5:a8:33:dd:8e:b0:
                    f2:ff:6f:31:96:59:24:e4:84:d0:4e:be:94:33:ed:
                    de:a4:1d:30:40:6d:6b:80:73:6a:93:e5:dd:31:da:
                    fc:26:17:f4:e8:bd:0b:0a:f1:c6:71:cf:a6:a4:70:
                    f7:d7:89:f3:05:94:02:34:c5:8f:2c:3d:fd:a7:6b:
                    d2:8e:a1:e2:86:61:90:d0:bd:a8:c4:79:43:29:64:
                    91:bd:11:81:e9:d3:74:5b:bc:88:da:95:01:04:cb:
                    fe:3c:46:8d:08:31:d5:de:75:d8:34:76:38:92:31:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:00:60:43:84:83:52:0D:61:32:D4:E8:C1:F5:6B:96:63:CC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f2ec6d0f-bb16-376c-b8b2-2cf5ad28cb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:f0:b4:b5:d0:32:d6:c5:06:d3:b1:8b:46:53:c1:2a:7d:
         b3:05:e7:9e:aa:8a:ac:c5:ff:b3:ed:8d:29:86:8c:16:7d:f0:
         57:72:f4:ac:30:fb:56:96:ba:ad:e8:39:cc:08:0f:b7:f2:37:
         0e:c8:ba:97:fd:50:88:b1:0e:8c:09:91:3e:b9:96:ad:c8:de:
         e4:bd:01:be:37:72:39:17:9b:79:0d:94:30:e8:51:ec:39:96:
         27:03:e4:38:bb:5e:9e:ef:da:ad:79:d5:68:37:60:c2:c4:b3:
         f3:1d:6d:41:ad:16:01:74:32:87:1d:d3:f8:26:22:5b:9c:d9:
         67:70:9c:55:58:52:0b:9e:4a:97:92:b8:b3:a2:20:d3:60:75:
         d7:4a:20:f8:d3:9f:10:57:23:73:74:4b:25:b2:0d:64:02:3e:
         b9:68:ba:c0:21:04:3f:d9:c0:2e:27:d0:11:01:cc:99:f2:23:
         f0:c4:5b:79:33:7e:bb:a5:1d:9c:79:7c:57:7a:f9:dc:de:83:
         33:d7:64:08:c3:c3:9a:2f:9e:2c:cd:4a:3a:be:a4:8d:bd:24:
         4c:7c:19:e0:dd:2b:b4:3a:79:b6:26:7d:72:77:77:4f:e1:c1:
         81:28:c1:a2:a5:44:8f:a9:81:69:0c:f4:7d:e1:a5:56:10:d7:
         0f:f8:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:37 2025 by rpki-client