Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/b0c1b5d8-51af-374d-9216-990b30ef38ac.roa
File:                     b0c1b5d8-51af-374d-9216-990b30ef38ac.roa (raw, json)
Hash identifier:          jh+nGms4LXM+DCeskGyXAzcmXhKOgOvQvApdmIXMPFg=
Subject key identifier:   25:71:20:B1:42:BC:EF:04:BF:B5:CB:F9:19:38:2E:80:27:F9:11:13
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584B36BC50DE59357C8686A22480
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/b0c1b5d8-51af-374d-9216-990b30ef38ac.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     7896
IP address blocks:        2620:53:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:50:de:59:35:7c:86:86:a2:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=30bec259-03f3-452d-85f0-1695ce38756e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:2f:47:55:e7:8a:4f:ff:8e:fe:8a:de:cd:
                    a7:d4:ea:8d:37:e1:5b:1a:2d:77:48:57:6c:5f:c4:
                    79:7f:7c:a2:b2:4d:41:84:cb:97:09:a7:c8:d4:79:
                    1e:e8:c7:e5:e7:0f:bd:ef:60:a0:15:02:bf:b0:81:
                    c5:f2:86:75:5d:dd:91:2e:a3:06:4e:51:0d:4e:f2:
                    11:a3:4a:47:76:e3:e4:5b:61:71:23:35:81:ce:7d:
                    2e:29:c6:82:79:e1:50:51:4c:3f:dc:9a:31:f6:e1:
                    d9:3e:df:33:88:1f:ae:dc:63:4d:28:e8:4a:7c:89:
                    7d:61:9d:ba:25:bd:6a:1e:4e:75:06:5b:2a:d3:71:
                    1c:c4:38:68:b1:38:e6:25:43:8d:a4:2d:fc:b1:20:
                    7c:d5:f0:54:50:99:a9:67:ce:83:fb:8d:45:60:67:
                    37:c3:94:b2:ee:20:de:14:8a:71:90:be:5c:57:ea:
                    36:04:da:6b:f2:91:82:be:04:08:6b:9c:8b:e2:52:
                    f7:1a:b9:48:67:2e:26:95:6b:f9:00:d6:08:d6:f9:
                    bb:80:7c:b3:52:9b:a9:ef:1b:e7:c3:85:0c:8e:5d:
                    59:80:b7:c1:a3:9c:ba:c6:2d:8f:93:af:c1:fb:72:
                    74:ea:c4:07:7d:1c:11:ec:f1:f3:33:f1:75:a9:93:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:71:20:B1:42:BC:EF:04:BF:B5:CB:F9:19:38:2E:80:27:F9:11:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/b0c1b5d8-51af-374d-9216-990b30ef38ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:53:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:79:27:5b:f7:48:6b:20:bc:0b:49:3e:db:38:81:27:31:34:
         47:70:cd:10:16:f7:1d:eb:e1:fe:fd:2c:f0:e3:7c:0c:25:a7:
         6a:4e:9f:ad:19:38:0d:88:f2:b9:c4:67:8f:e3:0c:d7:22:f5:
         4e:d6:02:74:20:28:42:e0:7d:e9:39:0f:af:b9:a8:f5:b2:8b:
         28:57:3f:a2:51:18:16:29:7b:c1:a4:8b:a4:51:1c:54:1a:04:
         5e:88:31:93:81:de:b3:29:af:18:6f:a9:03:08:5a:4c:7b:83:
         39:00:e6:b5:ef:9a:c9:a9:0f:ec:80:72:6b:43:cd:26:85:68:
         2a:ac:79:7f:c1:24:2e:70:3d:e1:76:e2:c8:ac:0a:46:64:b9:
         ca:c6:14:ac:6d:40:51:c5:cb:cd:1a:74:b6:9d:9b:89:03:d8:
         31:1c:e9:53:ae:1b:3d:cb:7a:85:31:84:37:a7:9a:e2:41:32:
         0a:0c:8e:77:fb:4b:f7:2b:41:9a:3c:d3:8e:a8:48:a5:e4:e3:
         06:1d:83:a9:ba:eb:24:b3:da:06:49:14:aa:c5:b5:93:26:ec:
         76:7c:9c:ea:2a:5e:69:b8:5d:67:dd:f6:70:e2:92:12:6c:0c:
         50:04:38:72:5c:fd:11:74:72:d4:de:98:bb:c9:8c:d2:74:e0:
         37:34:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:18:13 2025 by rpki-client