Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
File:                     b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa (raw, json)
Hash identifier:          pneDVCSiKonvRd87+ePkh7Foy4Ft8TDicAsEJTMDsrU=
Subject key identifier:   82:8E:C4:57:5C:7A:D6:1C:EA:25:FE:07:C9:BC:44:28:49:34:73:37
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584B4FDC7A174EA8BA0AC1B47C60
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     49
IP address blocks:        2610:20:6f15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:17:4e:a8:ba:0a:c1:b4:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=8024a956-2d70-4a8e-930c-6e35d1c3a8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:2e:d3:72:51:f6:2c:cb:96:c3:0f:ff:10:
                    54:9c:99:ab:28:99:b7:ac:85:3b:5f:02:e8:61:00:
                    2f:48:5c:28:3a:7d:3f:d4:38:01:fb:31:a8:b4:55:
                    db:f3:f0:06:dc:dd:65:ef:95:d7:dc:64:57:6f:a0:
                    c6:8e:52:86:b0:a4:53:70:83:bb:c3:87:72:26:78:
                    f4:5f:9f:26:cf:e1:10:71:9f:54:68:9b:39:15:47:
                    58:ca:aa:dc:84:67:b1:0d:3c:c8:f1:29:46:fc:9d:
                    f2:a5:23:fb:35:bd:a6:6e:29:5d:7c:79:b7:0a:05:
                    b9:f9:f6:ce:a0:62:4c:81:5c:b0:0e:5b:da:59:ac:
                    e7:bf:a1:c5:61:ea:d9:8d:22:4a:a6:8c:14:64:34:
                    6d:12:3a:9e:50:03:2c:c5:2f:31:5a:bb:37:82:83:
                    bd:b6:d3:b6:97:12:b2:f3:8f:96:c4:eb:3c:64:43:
                    aa:48:1d:42:e9:04:64:dd:94:16:da:88:08:a8:fa:
                    24:43:44:8c:f9:4c:45:3a:dc:c8:95:22:85:4e:f9:
                    02:05:78:93:2f:1c:55:ec:db:ab:67:6b:ea:5f:60:
                    c9:d1:cb:7e:fb:a7:9c:d0:dc:9f:3e:c8:2b:36:ac:
                    34:2a:94:dc:6e:4a:90:cf:61:41:45:aa:a7:8b:5e:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:C4:57:5C:7A:D6:1C:EA:25:FE:07:C9:BC:44:28:49:34:73:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:c5:d3:5d:7d:5e:3f:f3:5b:18:ce:31:64:24:da:5f:2c:
         4a:f3:cf:1b:1f:84:e8:35:d0:4b:55:6f:9d:41:d8:0e:2d:ed:
         6e:70:0d:64:ee:18:ad:8e:1e:0f:52:06:a6:d2:4e:6d:4c:f5:
         6e:f0:b4:5f:87:6b:37:61:dc:c1:0c:1a:07:72:d2:e3:9d:d0:
         32:b7:35:50:f1:cc:e1:c0:92:7d:86:5b:a7:29:0c:46:37:8a:
         5b:e4:3e:39:79:14:d5:ea:d2:74:26:9d:73:d5:20:8a:53:18:
         40:a4:7c:0f:53:dd:e5:a0:d6:56:74:02:8f:77:50:1b:c6:83:
         3a:9e:24:7c:36:a6:eb:9e:86:97:86:ee:cf:68:57:31:98:f4:
         16:03:e6:f9:27:fd:37:09:dd:97:fa:2e:1f:d2:b8:8d:37:d4:
         13:72:4f:75:56:fc:20:9e:d4:78:4e:da:ea:c7:a9:c4:50:d9:
         73:fd:4b:6d:9b:0b:ee:b3:d9:fe:a8:04:21:85:c5:cf:68:1f:
         61:49:c7:c1:21:15:b4:f6:b9:b5:15:3e:5c:79:86:58:70:0a:
         4a:02:66:df:ab:cb:b1:27:1d:8b:6b:96:52:53:3c:a9:36:18:
         52:96:95:a7:ff:72:c6:ea:c3:bb:cc:82:eb:a9:5b:ab:43:16:
         19:37:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:18 2025 by rpki-client