Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa
File:                     60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json)
Hash identifier:          6bvRAUyoDxeHb+7jooN3ZQSYmT+U8PsdMf5//AqOvrQ=
Subject key identifier:   93:74:98:1F:F2:FF:7F:9E:30:21:17:73:3A:B2:70:1E:B6:A2:63:E3
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584A6F20783E459EBA472D6881D8
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     32058
IP address blocks:        2620:0:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:78:3e:45:9e:ba:47:2d:68:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=a9dc77e9-11f4-44a5-8458-5b85f6457055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:d4:ec:02:22:4d:cb:b8:5a:50:5f:2d:4e:
                    e3:41:0d:b1:89:ed:41:d3:b3:cf:67:11:fc:13:91:
                    7e:7a:3b:cf:62:bf:01:b6:b1:5e:ca:f8:fe:7d:cb:
                    4d:c7:89:41:56:69:8a:1f:23:f4:83:50:44:9b:f6:
                    ee:20:7e:09:32:97:e6:71:ff:de:bd:92:cf:a2:32:
                    d7:df:d0:e7:29:9c:a0:7c:8e:04:64:1a:99:06:e2:
                    41:55:c3:5a:c4:0a:45:69:88:89:72:5d:bb:ed:62:
                    0e:fd:a8:38:f9:eb:13:87:57:53:ef:10:7a:44:14:
                    85:6d:a0:11:96:9e:12:0d:2a:c1:77:85:2c:9f:a1:
                    5e:ec:fa:49:cb:45:3a:a8:07:7a:b6:fc:89:26:a6:
                    16:eb:d2:fb:c6:56:6a:31:dc:e5:92:b9:4f:a8:8b:
                    1c:bb:3d:f9:08:73:fc:10:1f:98:39:5d:3e:19:f1:
                    d8:bc:66:26:4c:76:c1:20:c1:d6:3e:4c:99:15:1d:
                    99:c7:b7:5d:b3:46:2f:a9:fc:57:4e:62:a9:02:5f:
                    28:bd:72:e3:46:7a:89:fe:13:fd:1b:09:48:6e:47:
                    41:61:25:a7:96:54:93:54:51:31:91:58:01:a6:36:
                    b5:67:2a:86:c1:88:b4:de:15:7f:31:ee:40:de:fe:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:74:98:1F:F2:FF:7F:9E:30:21:17:73:3A:B2:70:1E:B6:A2:63:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:49:56:f2:67:81:7d:ec:55:b3:b9:20:19:5a:59:58:6f:6c:
         fc:a6:0f:d1:ba:b7:46:39:8e:b1:7d:6e:3a:04:1f:cc:54:4c:
         80:45:b8:63:11:2f:01:8c:82:84:4f:2f:4b:be:ea:37:e9:17:
         8d:db:4b:be:27:a4:b9:c2:7d:9a:ad:7d:34:c2:ec:e8:5e:f3:
         0a:2a:1b:cd:11:b7:c9:b7:12:b5:75:e2:d9:e6:26:1a:76:c2:
         1f:85:84:19:c0:36:da:6f:24:58:e3:9a:ae:d7:3f:d9:f3:ce:
         44:66:ab:b3:ac:ac:bb:cc:06:aa:07:d5:57:e2:51:2b:5a:d0:
         d0:3e:0f:ff:2d:96:ee:3d:5f:5b:fe:41:65:85:c8:da:1a:bb:
         07:f8:f3:d0:0e:e5:95:da:88:41:a3:d0:9f:08:4b:9a:5f:bf:
         b0:41:65:ee:48:4d:79:31:d9:81:2e:89:f3:4b:8a:2c:29:51:
         ff:47:67:87:02:58:2d:17:50:fc:b6:37:77:59:40:59:58:08:
         0b:56:b5:d9:96:00:66:2f:a2:22:cc:96:44:37:b9:e1:9e:7e:
         04:2a:43:c8:6a:f6:1d:1c:0c:f9:6b:4d:01:64:da:f5:9b:2b:
         c9:c5:b2:2c:3d:76:59:7f:90:b5:31:52:68:d4:6a:5a:b4:00:
         49:16:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:27:43 2025 by rpki-client