Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
File:                     e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa (raw, json)
Hash identifier:          Qhh6+jCwOETOf0LGlPIR+Bwq5o6uBchEqDkzl93q0X0=
Subject key identifier:   DA:68:62:9B:2F:B8:0E:0F:22:64:D3:3D:35:B8:D2:C9:21:DF:5E:B1
Certificate issuer:       /CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
Certificate serial:       010D0C9F4328584B153C1E73F5BE94257105D300
Authority key identifier: FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     36081
IP address blocks:        2620:0:eb0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1e:73:f5:be:94:25:71:05:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=58a0796c-f9af-412a-9cc3-480afc487c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:b6:95:2d:0a:a8:01:78:27:8c:6b:e3:cf:
                    e4:f1:ee:19:7b:73:3c:97:26:f5:01:92:d9:77:62:
                    8c:a0:87:61:26:fb:3d:b8:84:d3:31:42:e4:74:c3:
                    25:97:06:fd:78:2c:28:f4:97:0b:97:05:e7:66:e2:
                    78:aa:ed:e2:67:48:a2:fb:52:d2:2c:3e:1e:0d:a4:
                    cb:91:3d:39:f9:03:15:c8:6e:7a:f9:13:20:6e:f0:
                    6b:17:9d:98:54:07:72:8c:3b:ef:01:9c:37:65:48:
                    11:23:8a:dc:99:07:20:db:9c:e0:2c:c5:e9:68:61:
                    5d:7d:8a:79:6e:80:34:81:97:2e:4b:1f:61:83:5f:
                    4c:80:a9:05:f1:5e:8c:c7:57:4d:d4:dd:10:8c:63:
                    e4:f9:98:a3:5a:23:a2:81:2d:53:fd:c6:d6:8f:81:
                    7d:4d:e1:13:a1:94:16:c8:ef:50:d1:64:9e:7e:11:
                    99:fc:9a:69:1a:51:a4:d2:44:32:a3:6f:f0:4e:f5:
                    79:78:63:11:14:e5:72:13:a0:b5:de:30:ce:75:ac:
                    b7:56:27:b8:33:3b:26:1c:48:79:cf:59:6c:05:bc:
                    5a:9c:72:76:31:c3:66:17:1d:a1:b7:19:5f:88:6a:
                    6e:03:a7:25:c8:ab:57:c5:41:b8:22:8e:54:ea:98:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:62:9B:2F:B8:0E:0F:22:64:D3:3D:35:B8:D2:C9:21:DF:5E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl

            X509v3 Authority Key Identifier:
                keyid:FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:eb0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:b3:c2:e8:70:b9:72:2b:02:a3:57:dd:fa:1f:c6:55:6f:
         57:e7:ab:8a:b0:56:27:ee:d8:99:a1:b8:7b:45:49:73:b4:f8:
         fc:5a:7d:d5:0d:fc:8e:5e:a7:15:1b:e0:16:21:c7:72:a5:89:
         a5:e6:25:41:b1:56:8c:1b:9a:d5:2c:c7:57:03:3b:a7:1e:03:
         f2:12:d8:de:98:c1:07:32:4c:e9:c9:43:46:5f:01:ee:9c:28:
         a5:b9:aa:b2:3a:66:0b:66:14:cb:fb:f2:4b:f3:16:8b:49:fd:
         c2:fd:53:74:b8:7e:f3:9e:e7:93:94:c0:d7:64:3b:94:3a:c0:
         07:00:84:7f:ba:aa:62:c9:4f:41:9a:07:fb:e9:bf:ce:57:0d:
         a5:b6:b5:8c:42:6c:a8:a0:d3:89:a0:a3:34:77:70:cf:43:1a:
         18:af:b7:bd:e1:8b:bf:ea:56:4c:7a:bc:c8:82:f9:d5:3a:b2:
         2b:7e:3e:a8:ba:50:69:89:40:cc:f8:d5:aa:2b:99:7c:a8:df:
         b6:10:d6:b5:36:79:e9:a6:b2:15:02:fa:1a:79:f6:8e:8f:f0:
         b7:5d:fb:1c:7a:37:4b:55:cb:9b:7a:65:4a:d7:bb:b9:c3:e6:
         3f:c8:6a:3e:da:92:07:3d:e9:0b:8d:25:f8:41:68:8e:bf:4b:
         40:8b:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:25 2025 by rpki-client