Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/549db215-21b3-36e2-af62-c55ae61eb7ef.roa
File:                     549db215-21b3-36e2-af62-c55ae61eb7ef.roa (raw, json)
Hash identifier:          zxS3fem+WICWlCHmVxrNKL9cbkFKGkH9RFAxIfrj2uM=
Subject key identifier:   B2:D6:18:7A:56:FB:E7:28:BA:F6:37:F8:48:65:E3:95:7F:10:1A:D7
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584AE9F66E56AEEFF5E4CC4EEC40
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/549db215-21b3-36e2-af62-c55ae61eb7ef.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        2604:b040:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6e:56:ae:ef:f5:e4:cc:4e:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=1c68d764-60f8-436e-99c9-ca1461cc8288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:47:fb:b7:31:66:c4:80:db:e4:a4:00:10:
                    e5:2c:7d:e3:e6:b1:20:33:43:21:28:f6:80:bd:4f:
                    6b:14:28:e5:b8:38:ba:a9:6b:a9:95:50:a6:a7:44:
                    47:9f:42:af:71:c1:07:2e:60:43:33:2b:4e:16:a9:
                    c8:69:93:04:41:dd:7c:69:32:4e:07:3e:e9:54:b0:
                    50:92:66:b9:cc:6c:96:f9:9b:18:9c:93:24:aa:f0:
                    83:fb:05:4f:5a:f6:10:54:22:35:7c:a6:3d:00:8c:
                    f3:ec:00:99:4d:52:50:fa:05:35:be:00:91:55:64:
                    59:dd:a8:84:b1:ab:39:83:7d:e8:ff:d7:19:e6:55:
                    91:d8:a4:65:e7:b4:cb:95:d3:64:a3:35:86:c9:db:
                    72:66:b5:3c:07:18:c8:7f:cc:04:cb:3c:d5:ea:b3:
                    a5:24:f9:89:97:5b:b8:5b:28:a8:f3:d7:37:8d:4f:
                    00:80:3f:71:b8:0a:c6:13:c2:b0:5e:27:a6:5a:93:
                    7a:bb:bb:6d:b6:2a:ec:47:c7:da:99:0d:62:ba:55:
                    81:34:72:b8:17:49:9e:ad:1d:82:90:05:fa:82:a4:
                    74:f6:84:c6:f5:83:c5:66:ad:67:0e:21:ab:cb:62:
                    57:18:b1:50:84:0c:2f:9e:f1:70:d3:0b:ce:52:a7:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:18:7A:56:FB:E7:28:BA:F6:37:F8:48:65:E3:95:7F:10:1A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/549db215-21b3-36e2-af62-c55ae61eb7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:91:f8:63:c2:05:d3:dc:be:8f:ea:65:e5:98:59:c2:a2:
         b9:45:17:c3:60:25:40:63:34:fc:15:d7:35:69:13:2b:9a:8c:
         11:50:8f:db:74:61:2b:33:c8:4e:a4:d9:42:f6:16:2e:36:07:
         a5:6b:d9:1d:79:1a:6d:93:b2:04:47:69:f4:16:34:b9:b2:fe:
         56:7e:5e:08:65:95:bb:59:d5:5d:02:2d:7b:5c:5c:79:0b:f3:
         ae:c2:8d:a2:2b:81:de:a9:61:ca:a3:73:a5:b2:4b:75:b6:6a:
         78:02:ed:fe:6f:ea:45:d4:4d:30:fa:44:eb:7e:88:40:53:90:
         49:7c:07:41:30:bb:f4:1b:b7:ad:92:ab:f0:ef:fb:c3:3d:fa:
         b3:71:59:0d:72:06:26:b4:50:d3:0b:a1:6e:bf:28:d8:99:74:
         33:45:22:2a:5e:09:2a:49:9f:79:f8:d3:39:32:e7:c2:d0:7e:
         9f:29:56:86:28:04:cc:dd:0c:68:ef:dd:33:c5:a1:7b:bf:ff:
         6f:ff:cb:92:51:1c:75:1e:08:b5:0e:db:78:68:79:ac:3f:aa:
         c0:95:7a:30:e2:e1:30:e3:a6:51:9d:fd:fc:b0:d4:7a:d3:75:
         3b:a9:14:ae:b5:51:01:c6:53:57:74:11:b7:7d:85:ba:d6:fd:
         21:c9:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:52 2025 by rpki-client