Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File:                     00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier:          UW7vjIMHy41G/lj6/PE/8VV+x9GuKIXwRtdqjdc/8WY=
Subject key identifier:   E6:AC:71:4C:7D:4F:51:CB:C3:7B:79:94:3C:0A:5A:BE:1E:82:75:A0
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584B4FDC7A3BAD408347B8049C80
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     49
IP address blocks:        2610:20:6f97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:3b:ad:40:83:47:b8:04:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=635487b2-b2f5-4e24-b427-6d1f6a0cc2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:9f:6c:56:b9:6f:7e:5d:2e:cb:2e:cc:78:
                    02:81:9a:a7:ce:ca:97:16:b5:06:e2:0e:f1:5a:6b:
                    47:ed:32:61:b4:25:35:49:c5:fe:78:9d:a6:91:7b:
                    17:2f:88:01:62:a6:2e:49:91:fe:34:9c:e0:6e:9a:
                    8e:95:60:69:61:6a:70:5e:29:82:8f:d6:1c:39:45:
                    ae:f8:7a:c0:21:4e:00:21:a6:65:6b:78:d3:e7:cb:
                    77:ed:c8:d8:3f:ea:b5:00:65:1c:a6:d3:c6:64:d8:
                    8c:56:6b:9e:b5:84:30:12:ab:84:af:a1:ef:01:1f:
                    a1:a2:47:e3:3e:83:c5:50:96:35:ef:0f:b5:40:e5:
                    d0:12:98:aa:7b:04:51:d0:58:ce:9c:24:24:d1:f8:
                    d5:45:67:24:f1:1f:c3:bf:dd:66:34:bc:84:5a:ef:
                    80:74:17:15:74:86:ee:3e:d9:cc:eb:aa:94:85:c9:
                    dc:ab:1c:14:a4:92:f2:81:da:03:fc:57:30:95:57:
                    14:c7:6e:02:51:8a:e4:51:96:14:fd:64:c6:91:e4:
                    69:fe:a0:de:7f:77:b7:6b:52:41:9c:0d:e2:cb:02:
                    48:69:26:80:64:f1:66:b9:26:86:5e:00:2c:b5:d1:
                    71:73:6e:73:d8:86:ee:76:52:c0:cf:66:70:f1:ed:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:71:4C:7D:4F:51:CB:C3:7B:79:94:3C:0A:5A:BE:1E:82:75:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f97::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:38:9a:f2:9d:00:58:3d:33:da:a5:94:4f:99:d3:8e:f6:1d:
         0d:34:a9:ec:70:e7:11:7a:66:05:71:e5:8e:ad:82:ba:94:c2:
         ab:e9:c0:9f:16:40:c6:19:20:6a:b5:1d:0f:e7:52:8a:88:3d:
         41:da:8e:d4:20:06:3a:72:82:ca:e2:cc:14:ee:6d:dc:5f:e6:
         07:db:2d:27:a4:dd:c5:6e:06:70:e5:6b:f3:5c:40:a1:96:db:
         13:3f:db:e8:4d:eb:47:13:6d:eb:15:49:5a:48:f8:c7:83:6d:
         2b:de:b7:fb:bd:5b:5f:c6:90:33:84:01:96:bc:31:b6:d6:e3:
         32:8e:95:e2:98:ff:54:b1:d5:cf:e0:db:7d:4f:2a:40:73:20:
         ad:f6:d7:42:a3:4f:be:27:c4:14:03:b9:89:67:eb:67:cb:40:
         1c:54:44:29:6d:22:2c:f5:ae:e3:c1:c8:6f:c2:b8:23:b9:fe:
         e6:7d:80:43:37:9a:9e:c6:f4:88:58:21:9d:85:6c:74:92:c1:
         65:b6:86:c8:3d:c3:e3:6b:09:60:97:85:ce:4a:c2:71:91:85:
         1e:04:76:16:8a:28:c9:35:f9:b2:cf:09:53:31:bd:1f:f9:ef:
         e4:f6:d6:a3:b0:0f:a8:11:36:02:3c:e8:81:a8:df:72:ce:45:
         59:11:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:29 2025 by rpki-client