Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
File:                     bc426fed-fada-323e-8db0-afd0fab751de.roa (raw, json)
Hash identifier:          IDzkAou4++kWZd+8L1h4IJS7y1EROi7bzwuV+cw6KoA=
Subject key identifier:   1E:DD:C2:8B:7E:AB:6F:D9:02:A2:65:A5:8B:34:63:FD:63:9C:F6:EB
Certificate issuer:       /CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
Certificate serial:       010D0C9F4328584B0746C3A4AB119C23088A04C0
Authority key identifier: AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     36666
IP address blocks:        2620:c1:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c3:a4:ab:11:9c:23:08:8a:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=4ab770bb-3e6a-482f-a583-886c5a527e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:87:0a:ec:99:88:61:d9:63:49:68:60:4e:
                    2c:d6:75:2d:79:a9:d4:0a:b9:0f:ee:06:a1:88:e5:
                    b9:71:de:0e:6f:3b:e4:7b:0d:51:1f:f1:e9:78:05:
                    34:ed:52:74:2d:da:54:33:8d:13:04:81:6f:a0:00:
                    6e:97:f5:a4:f3:b7:6d:94:86:6e:67:aa:f2:78:97:
                    7b:56:e5:97:a4:a6:60:ea:e9:29:8d:35:d3:6a:de:
                    84:68:a8:c7:8c:0b:92:54:05:df:d2:5e:ca:6b:11:
                    c7:86:27:42:ff:2b:b4:d1:2b:1f:32:3a:20:77:b1:
                    f7:49:2e:59:ea:8b:1a:88:e0:65:87:55:99:30:12:
                    38:c7:d1:df:23:17:15:e0:7b:dc:11:3c:e9:3c:c5:
                    ac:cf:3f:65:d0:cf:18:b3:a2:55:c0:f0:2a:e7:b3:
                    50:26:1c:8e:b5:39:8e:93:42:02:aa:4d:97:b5:f7:
                    f3:17:fe:93:16:49:22:b5:19:ce:ec:47:1d:1c:4a:
                    a5:fd:ab:01:4e:fd:01:40:6b:f0:46:b9:d5:76:3a:
                    f0:97:17:25:5a:8f:23:5b:f1:d2:1f:b4:0b:b6:78:
                    28:8d:10:34:44:b7:40:1b:12:4a:5c:54:a8:e1:3a:
                    d6:c5:6d:2c:84:aa:98:ee:78:c4:73:59:01:63:21:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:C2:8B:7E:AB:6F:D9:02:A2:65:A5:8B:34:63:FD:63:9C:F6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl

            X509v3 Authority Key Identifier:
                keyid:AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:6e:b6:19:a3:74:a4:29:7c:fa:c1:18:2d:de:03:b5:86:
         d9:25:f8:57:40:86:b7:9a:39:47:6f:cd:02:87:ca:12:c2:35:
         10:14:06:e7:69:d5:79:da:a0:7e:2f:d0:f5:14:b0:81:94:15:
         37:05:5a:a9:1a:6a:f0:d1:ec:7f:e5:3e:ed:30:4d:93:76:59:
         df:d9:9f:26:ec:14:13:a0:73:9d:78:5b:a9:61:c2:71:a1:1d:
         61:36:0b:4e:6e:ec:84:20:7d:fd:dc:bb:f3:e5:90:91:3e:ee:
         a6:14:b3:ab:49:23:cf:78:4f:e1:54:4e:75:2a:90:c4:18:de:
         ce:5d:7f:9e:c0:8f:94:34:4a:f6:17:75:6f:bb:c5:d5:93:0f:
         90:c1:20:cf:7b:58:30:ae:f7:be:95:57:fb:41:25:c6:ae:62:
         96:d9:9b:b7:83:6a:33:40:40:39:78:a6:f8:52:87:32:ea:38:
         f6:d4:93:89:4b:a5:a1:72:72:f1:73:fc:e7:33:41:28:b7:ad:
         03:6f:18:73:d7:af:0e:63:ab:67:49:d2:34:01:ca:30:d2:78:
         fa:88:83:ba:e8:fb:a8:47:3f:2e:1e:0f:67:78:8f:fb:7e:33:
         4b:88:b6:e0:ff:8f:36:c1:c6:33:48:be:f4:39:46:55:a2:bf:
         d2:05:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:28 2025 by rpki-client