Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/5b1b8757-585a-38d8-b615-2de73dd53811.roa
File:                     5b1b8757-585a-38d8-b615-2de73dd53811.roa (raw, json)
Hash identifier:          TUzwPTwBPexJ/PMlUFI6O45lBVgUUnInAcoIIYH6Q7g=
Subject key identifier:   3D:98:82:BD:61:2A:9D:F9:E4:2A:19:0F:92:67:D5:F1:1D:98:AF:11
Certificate issuer:       /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
Certificate serial:       010D0C9F4328584ADA9BD309970562AFF2027AE0
Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/5b1b8757-585a-38d8-b615-2de73dd53811.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2602:f6dc:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d3:09:97:05:62:af:f2:02:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=e16e0fe3-21b6-415e-bb52-1e9a59a91f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:b8:62:fa:39:b5:01:f6:79:1d:e4:d0:39:
                    e1:0d:eb:a4:ba:7d:cd:24:74:6a:c2:72:36:06:44:
                    20:e2:49:93:bb:58:be:95:8a:ba:72:dd:d0:44:1b:
                    20:c2:2a:b2:f4:2b:5a:49:ec:95:a8:a3:68:11:8d:
                    5e:bf:69:19:c9:b8:68:46:33:a4:b2:41:b1:49:42:
                    7a:f8:1d:f6:ac:7c:6d:71:da:fa:1f:45:e5:75:7e:
                    d0:df:bc:dd:d1:78:4e:b1:88:db:4a:b5:df:f9:81:
                    4f:87:00:9a:80:21:b8:dc:7d:2f:c2:be:50:c6:8d:
                    30:51:2f:2e:05:51:ce:4e:6f:1f:bc:83:14:5f:11:
                    24:b0:61:60:b4:2a:ba:a2:7e:76:ca:7d:dd:6a:c7:
                    cd:f4:9e:49:5d:91:ab:75:92:56:ae:a1:bc:3f:0b:
                    b6:1c:fe:1d:27:c0:70:b6:90:5e:ec:1d:ae:01:fe:
                    e5:9d:1c:89:fd:67:19:89:50:8c:2c:20:14:af:3b:
                    cf:68:1a:81:e0:7d:b5:82:ff:84:0a:29:f9:cc:c3:
                    e1:a7:6f:16:db:6d:81:66:66:64:50:98:82:9d:b8:
                    14:a2:61:59:b8:2b:93:82:56:f9:e1:4d:79:38:8b:
                    22:c1:cf:3b:60:d4:60:78:50:23:09:d9:eb:a0:b5:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:82:BD:61:2A:9D:F9:E4:2A:19:0F:92:67:D5:F1:1D:98:AF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/5b1b8757-585a-38d8-b615-2de73dd53811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6dc:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cc:f2:1b:c9:bc:ac:b9:35:9f:e9:d4:7d:0d:95:36:71:41:
         f9:cf:34:ec:d3:38:75:de:c3:5b:4c:af:5a:0b:63:81:63:61:
         72:65:8f:0a:53:4c:a2:3a:6e:b6:1a:b8:56:86:4d:78:d4:ae:
         e9:b3:7e:cb:05:28:b8:35:b4:e7:52:b3:05:1c:b3:85:9e:aa:
         0f:ea:9c:55:31:c2:94:4d:5f:1d:8a:f2:46:a2:dd:0d:c7:ab:
         1d:ef:eb:c8:18:95:fc:01:d1:27:6d:60:34:c8:b0:0c:e5:8c:
         94:ca:3f:80:2e:39:8e:cf:cb:7f:bd:88:c1:56:19:90:aa:09:
         2f:be:d4:02:63:38:e8:c8:ce:93:0e:86:26:b9:b5:09:c2:86:
         ef:0b:4c:b8:4b:cc:50:d7:c5:23:f9:6b:65:f6:58:b0:74:7e:
         f9:c2:2c:01:a3:26:70:d1:bd:25:ab:f7:50:7c:f6:1a:00:4b:
         00:ad:dc:e8:d1:d4:77:30:f5:04:7f:4e:8a:26:8b:cd:57:5d:
         d1:cd:fb:36:96:57:30:58:3c:73:63:7f:8f:60:95:11:19:52:
         e1:79:08:ab:c4:cb:17:04:5a:30:92:aa:c3:86:4c:cb:81:16:
         bc:fe:36:eb:aa:ad:89:a6:9c:1f:08:a9:9e:df:e2:1d:85:31:
         27:fd:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:39 2025 by rpki-client