Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
File:                     8370a0b9-b3bb-3794-b676-98a3ff12db47.roa (raw, json)
Hash identifier:          Tt0mN4ouaDOYCO5Ady+ziyAbFJ74xRdYTtroYJcABwE=
Subject key identifier:   83:F4:55:5B:1E:B6:E9:B1:1D:0D:D3:80:13:7D:03:31:DC:C7:91:C5
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584B0746C1E7971BD0618C6115C0
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     6142
IP address blocks:        2620:9:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c1:e7:97:1b:d0:61:8c:61:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=bc25adb3-5676-43de-a308-362b909f6b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:9f:9d:44:fb:89:f9:25:a7:2e:5c:a3:cb:
                    b9:94:5c:b2:bc:05:52:01:4c:1d:6b:43:fb:ed:58:
                    c7:4b:19:e7:0f:d5:1d:2a:4a:d9:b8:53:ed:94:d3:
                    cc:68:e7:52:bd:92:4c:fd:e9:f1:3a:c7:be:34:4c:
                    fc:c6:6c:eb:02:13:c2:ec:ec:9d:84:89:ef:2b:1e:
                    8c:68:92:4f:63:04:f8:1a:0c:0a:5c:5f:47:60:2d:
                    64:40:27:a3:a3:b3:d5:b5:19:23:04:51:25:e9:02:
                    cc:cd:0a:b8:41:49:ad:d3:3a:66:7f:f3:c2:3c:97:
                    69:08:5d:f8:df:7c:0d:6c:e7:42:f4:fb:8f:75:14:
                    e2:a2:a8:dd:20:99:9f:74:35:d6:f0:c5:3f:ec:7e:
                    ab:22:36:b9:f9:97:08:90:f8:3e:38:b4:69:b7:cf:
                    48:14:a1:40:9e:c6:cb:b0:26:e8:8f:3b:99:e9:e4:
                    7b:43:75:ec:1c:60:14:ba:01:e0:77:94:b0:05:0d:
                    05:a2:07:0d:d4:ca:87:5d:ec:40:15:e7:52:f1:13:
                    29:ed:e9:9a:8a:eb:4d:16:a5:4d:4a:29:8f:db:c6:
                    77:7c:fd:c1:5f:77:a1:78:8a:c3:14:a2:f1:c5:32:
                    3b:d1:bc:54:7c:62:47:34:f9:f8:00:35:7a:60:8b:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:55:5B:1E:B6:E9:B1:1D:0D:D3:80:13:7D:03:31:DC:C7:91:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/8370a0b9-b3bb-3794-b676-98a3ff12db47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:89:cd:2a:03:52:8e:c2:7c:45:ab:c7:e6:0d:c3:95:da:3b:
         5a:29:d6:e5:d2:10:2b:dd:d8:01:ca:3a:5e:fa:4e:2c:ec:0c:
         d2:ce:a3:a8:82:82:94:c9:52:2a:3f:60:89:24:57:10:a9:eb:
         56:73:47:aa:94:3c:1b:77:f8:97:ea:0f:f5:8d:04:cb:50:19:
         26:dc:45:6a:39:4c:0c:75:9a:ca:ab:d1:62:9f:29:ab:7e:3b:
         b9:e1:84:c1:27:c5:d6:e9:69:79:a2:56:73:01:07:33:ef:5c:
         e9:83:4a:25:15:41:33:99:11:88:76:c4:1d:26:df:99:8b:35:
         f4:a3:74:7b:d1:77:33:b9:cd:f4:9b:1d:de:a6:d3:81:40:25:
         f5:ce:39:b1:3e:e1:df:bc:d0:5d:37:c6:7b:4c:bf:77:fa:02:
         44:5c:d3:cb:06:e2:66:af:24:90:f5:82:2f:fa:78:09:23:db:
         fd:f0:ac:1b:11:38:1f:36:3d:62:7d:cd:bc:70:9f:78:af:9e:
         38:60:60:98:ee:da:a3:4d:93:8d:ae:c4:00:09:2b:10:81:cb:
         02:58:a9:6c:ff:46:da:6f:8c:20:4b:45:9b:3f:fb:83:68:fd:
         27:67:75:b5:f0:f7:26:31:37:e4:f7:1a:27:13:a7:cc:6b:d9:
         90:94:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:43:56 2025 by rpki-client