Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/55fdfb6e-3332-3318-b7df-bae9c2dbd8cf.roa
File:                     55fdfb6e-3332-3318-b7df-bae9c2dbd8cf.roa (raw, json)
Hash identifier:          J5WI+lDRBsGd8XFeBdQvOmOGh1IqSC8ltsyQlSDzwWU=
Subject key identifier:   5E:94:0E:4E:EF:A6:BD:10:FF:31:71:F6:AF:CD:F1:41:9B:22:A1:FD
Certificate issuer:       /CN=00621ba6-99e5-4a17-9087-51ef82e92263
Certificate serial:       010D0C9F4328584AFC1BEFF861444DC6FEA21780
Authority key identifier: E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/55fdfb6e-3332-3318-b7df-bae9c2dbd8cf.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     36210
IP address blocks:        2620:c8:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:ef:f8:61:44:4d:c6:fe:a2:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00621ba6-99e5-4a17-9087-51ef82e92263
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=455dbf75-60f7-469c-85ef-689ef76fa8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:a7:6a:28:e1:a7:eb:41:58:9d:a2:85:77:
                    ef:74:6e:65:aa:1f:19:46:33:09:76:1e:35:fb:92:
                    18:92:cd:a8:7e:81:13:c9:08:49:02:0a:5e:ba:8e:
                    92:15:58:34:d2:40:19:e7:49:76:57:ab:d9:e3:e1:
                    44:5a:eb:99:d9:ba:c6:ec:33:63:34:35:20:e8:50:
                    e7:a2:23:41:bc:0d:f5:ed:e5:da:5d:46:36:e1:0f:
                    74:92:39:9d:18:c0:f8:9a:ad:99:9e:a5:fe:34:ac:
                    74:0f:ec:59:c3:1e:d4:cc:e7:05:f7:de:d2:6f:47:
                    fa:93:4a:de:32:7c:3f:37:aa:81:da:bf:eb:1c:43:
                    16:ff:24:51:66:2c:8f:ac:45:11:f9:0d:50:fc:10:
                    9e:12:d4:97:dc:06:59:70:c0:dd:9f:4a:78:71:69:
                    15:e9:cf:54:94:3e:fe:b8:f3:8f:fd:73:68:59:18:
                    e1:94:4d:a3:c9:15:7a:b4:c5:5a:8b:d6:1c:34:d0:
                    d1:51:33:bf:a6:1e:85:7a:5f:ed:98:f6:0a:bd:cf:
                    cd:17:c1:04:55:69:db:03:57:e3:c3:24:b2:05:a5:
                    ed:f4:80:ad:1f:1c:9d:22:83:26:31:51:4a:22:32:
                    57:f3:9c:94:31:1f:d2:d2:e7:98:51:b0:c3:37:80:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:94:0E:4E:EF:A6:BD:10:FF:31:71:F6:AF:CD:F1:41:9B:22:A1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/55fdfb6e-3332-3318-b7df-bae9c2dbd8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl

            X509v3 Authority Key Identifier:
                keyid:E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c8:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:8b:09:c8:ea:6e:ee:e6:ac:73:c7:e5:58:98:19:28:f5:
         ac:ca:3b:40:57:6f:6b:98:57:7d:da:d4:69:62:19:43:c3:cd:
         da:a0:03:62:4c:1e:57:5c:84:6d:ac:33:a3:a5:f1:43:1b:71:
         b3:52:3e:23:39:78:83:53:f4:ae:43:96:fe:89:c4:af:90:d1:
         8f:19:0c:11:a7:01:9d:1d:4f:55:e4:8e:b9:e1:7d:55:27:6a:
         67:ba:f1:78:82:cd:1b:02:1d:23:6b:bc:6d:1f:3f:21:54:f9:
         24:f8:d3:62:7d:2a:d6:65:80:64:d3:ec:33:c1:c4:25:ff:7a:
         fd:ef:3a:2e:3e:4d:80:69:c4:c9:7b:d0:c6:6f:64:16:89:08:
         09:5c:4a:b7:75:af:8f:83:5f:db:0c:40:27:34:cf:e1:a4:0a:
         af:1f:90:9e:d6:8d:77:d8:84:70:48:d7:f9:a3:06:2f:46:ba:
         c5:b0:f8:89:18:ea:c6:f7:dd:12:b7:3c:2a:0c:31:cb:a5:57:
         0c:b6:21:06:02:84:e0:f8:ed:b2:df:e3:66:1d:18:a7:e8:7a:
         a9:75:3f:78:38:36:0a:61:e9:7b:fd:09:22:35:a2:5a:f6:2d:
         1f:28:88:3e:d6:74:72:9d:dd:2f:19:2d:e9:af:de:94:d0:9a:
         c2:5f:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:01:16 2025 by rpki-client