Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/8ba50ac2-1bbc-39f0-84e0-b9bc70b63ae6.roa
File:                     8ba50ac2-1bbc-39f0-84e0-b9bc70b63ae6.roa (raw, json)
Hash identifier:          BcM4eQccb+OKgq2YZ88AduoSzvTBivoOmUIo6bUEoMo=
Subject key identifier:   75:32:02:3A:0A:F3:03:D6:53:D2:93:BB:B6:8C:86:E7:DD:6A:78:E0
Certificate issuer:       /CN=c6018860-03bf-4e63-8de2-1e8aa1de0ce5
Certificate serial:       010D0C9F4328584B047BFD7E67AA72CB44278A00
Authority key identifier: B5:9D:3E:23:29:98:B9:14:68:C7:76:74:70:B8:0D:98:E4:2E:BF:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/8ba50ac2-1bbc-39f0-84e0-b9bc70b63ae6.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13613
IP address blocks:        2620:119:b00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:fd:7e:67:aa:72:cb:44:27:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6018860-03bf-4e63-8de2-1e8aa1de0ce5
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=e7bf470b-d0a6-48c7-adac-30dd0b97a107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:c3:ce:e3:51:40:a8:7e:69:33:73:77:33:
                    82:18:87:4f:43:4b:ca:58:e3:e0:b5:ca:57:57:a8:
                    68:1e:33:ed:39:b3:38:67:32:f4:d4:41:2f:d3:e9:
                    df:ff:dd:bb:c8:76:c1:07:f0:21:05:4f:d9:06:7d:
                    ad:68:9c:96:a8:9f:8f:d1:59:43:8b:89:9e:0a:72:
                    da:01:8b:81:59:0e:ea:84:c9:7f:85:6a:56:68:1e:
                    97:89:0c:c9:07:08:ee:81:fc:15:b2:e1:03:c8:ca:
                    3b:5c:8e:16:1d:37:71:89:98:5e:da:a2:6a:8c:78:
                    3c:1b:cc:80:79:82:f1:f3:f1:33:e2:e6:58:37:38:
                    e5:9e:6c:54:bf:e2:29:7b:b9:f2:6f:a5:cf:1e:58:
                    be:f4:59:8b:06:43:68:e0:7c:35:ef:3c:ea:4d:56:
                    79:6f:1f:da:49:76:54:97:9c:23:96:25:df:da:36:
                    99:48:c9:7d:d9:97:b9:4d:ab:ae:ef:00:07:78:68:
                    77:a7:01:42:0f:b0:b9:1e:12:e9:d0:d0:c5:2c:45:
                    b6:aa:1d:ee:fd:08:b6:f9:15:75:13:2e:af:07:cb:
                    92:21:61:92:25:46:f9:45:38:16:39:fd:0b:9c:26:
                    89:3d:d3:ea:4d:65:47:1d:42:9f:9f:cc:90:88:4d:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:02:3A:0A:F3:03:D6:53:D2:93:BB:B6:8C:86:E7:DD:6A:78:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/8ba50ac2-1bbc-39f0-84e0-b9bc70b63ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.crl

            X509v3 Authority Key Identifier:
                keyid:B5:9D:3E:23:29:98:B9:14:68:C7:76:74:70:B8:0D:98:E4:2E:BF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6018860-03bf-4e63-8de2-1e8aa1de0ce5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:b00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:c4:76:73:bd:98:22:77:60:4a:31:e0:e2:94:0a:e0:b1:
         d5:af:56:48:28:86:fa:fe:6a:b1:62:65:78:dd:0f:c1:04:1c:
         a1:fc:b2:40:5b:2e:8f:8e:08:e3:9c:0c:da:0b:57:7c:4a:9f:
         23:b0:c5:dd:20:70:e4:04:28:59:61:26:1a:76:b7:d4:07:9b:
         89:00:1a:0e:b5:fc:be:70:2f:62:4a:99:74:67:b2:96:24:45:
         7c:2c:8f:e7:78:67:6e:79:dd:d3:15:5f:1c:0b:00:02:52:04:
         76:aa:c6:f0:01:66:2a:97:be:d2:3d:75:45:40:ee:40:3d:a3:
         3e:13:20:32:ed:44:c3:da:2c:46:aa:1a:6c:d0:43:a0:5d:fd:
         af:37:d1:fd:d6:5c:82:aa:e1:e1:73:32:b5:0a:2d:a5:cf:3f:
         14:63:a9:c2:55:d3:71:07:78:48:a1:5f:c2:45:6e:d8:e7:dd:
         81:d4:53:b2:58:fd:ae:34:61:fc:ef:ea:9d:10:26:bf:ac:90:
         3a:76:11:73:af:4c:71:c9:9e:14:39:f4:46:da:48:0b:9c:14:
         2e:9b:ee:02:ad:6c:0f:01:0f:8f:47:33:8c:b0:f7:ce:5a:0b:
         60:82:65:a0:fe:30:61:43:fc:3f:36:48:e5:a4:54:03:5f:02:
         e0:af:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:47:09 2025 by rpki-client