Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa
File:                     aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa (raw, json)
Hash identifier:          EtFSEzM0DtvOH5qI+UydNeFT5iUvYvLoNUM255tfTlM=
Subject key identifier:   38:7E:BB:FF:E7:77:BE:C5:32:A5:C6:AC:DB:F3:F0:D7:81:14:11:F6
Certificate issuer:       /CN=71b34d11-5c74-4013-a0ad-639513ebea8c
Certificate serial:       010D0C9F4328584B4D11DD4CCFD043AF61012580
Authority key identifier: 4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     14579
IP address blocks:        2620:1b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:dd:4c:cf:d0:43:af:61:01:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b34d11-5c74-4013-a0ad-639513ebea8c
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=b183548c-ed13-4bf3-92d4-bc10d1f36878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:56:35:e7:73:db:e3:57:56:ee:0e:88:dd:
                    95:86:5a:53:ff:e9:f5:c3:ff:dd:dd:90:bb:19:2a:
                    50:d6:eb:31:a1:a2:f6:44:88:e6:78:d0:39:1c:b7:
                    75:d2:43:0d:3f:e7:32:ec:80:b3:7f:a5:32:47:ab:
                    02:a9:4b:c1:34:f1:35:70:47:ec:b9:dd:60:dd:8d:
                    0d:b7:a9:7e:47:1a:2e:a3:45:eb:31:a8:b9:7e:b8:
                    f7:ec:29:00:9e:ec:8d:16:d2:3f:92:9a:40:64:07:
                    99:bb:9f:57:bc:33:46:65:02:5c:a3:ac:36:1d:94:
                    51:6d:07:31:18:bf:22:35:81:11:13:c5:76:87:0c:
                    6b:c1:5b:7c:6a:e3:8c:51:09:f8:d5:66:cd:b2:f7:
                    69:f4:8f:30:de:2b:5b:88:87:22:1b:00:2c:db:d1:
                    cb:02:ba:5b:8b:5c:98:1d:04:a8:f2:ad:31:f3:e2:
                    8b:8c:eb:a5:b5:65:b3:37:6b:6d:c2:33:ac:2a:00:
                    99:51:89:b0:e6:b0:cb:c8:2d:92:75:3e:23:32:dd:
                    28:9a:20:d5:34:31:8b:29:67:0b:3d:2f:4b:4b:9f:
                    4e:4a:cd:73:4e:a3:85:2d:e6:f3:e3:ee:39:4f:b2:
                    f8:d3:fd:78:82:61:47:80:70:71:02:38:8f:92:7b:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:BB:FF:E7:77:BE:C5:32:A5:C6:AC:DB:F3:F0:D7:81:14:11:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:a5:22:4f:5f:77:f9:4d:76:7a:68:0d:da:0f:6a:5b:62:
         25:74:4c:99:a3:57:36:87:3a:b9:ce:95:e1:f7:78:00:86:b6:
         40:01:79:e9:ea:f8:ea:b0:12:f8:e1:39:d1:d6:d9:95:77:3c:
         87:be:1c:a6:16:f9:d8:df:0e:ac:65:63:f0:6c:61:f3:d4:99:
         85:db:36:80:e3:45:6d:8f:fe:17:ff:35:94:58:5d:25:58:46:
         47:87:0c:03:96:4b:40:d4:cb:d8:b8:61:61:65:63:65:4c:99:
         a5:f8:a2:67:07:55:57:4b:95:6b:12:3c:6f:4f:72:f9:7f:8c:
         3c:38:13:2b:c0:9b:0e:e0:b7:ee:84:3f:6c:65:1e:5c:c2:f9:
         d1:ee:74:0d:3d:93:06:69:2a:c5:22:a6:dc:52:8b:9c:be:71:
         87:ac:f7:cb:6c:a2:a9:c2:0a:ae:9c:66:95:63:dc:7c:06:8e:
         72:79:47:29:85:b7:2a:78:e5:5b:26:dd:c8:6b:3f:27:ef:64:
         7c:02:34:cd:fa:01:0f:2a:49:53:73:55:82:38:e9:73:ea:47:
         03:04:19:45:75:bf:f3:d0:57:4a:59:95:2d:e1:66:ad:f8:36:
         01:96:af:80:59:d7:4b:ba:19:a9:36:90:1f:cc:ee:73:c0:b2:
         63:51:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:14:48 2025 by rpki-client