Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa
File:                     3411e9b9-a14f-3453-8232-9d7197938dd4.roa (raw, json)
Hash identifier:          avUbgKAgB+nG3d5vpm441QaNqZogs5H9mxZNhLUY+7Y=
Subject key identifier:   62:0A:C4:5E:8B:E5:9A:C6:84:65:F0:94:B2:83:14:C9:43:3E:F3:9F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6D93A838CB8A0375272D0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2620:11a:c008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d9:3a:83:8c:b8:a0:37:52:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9ee4beb9-4576-4351-bdf3-ae6159c955e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:f3:ed:c3:e7:ea:45:d2:21:03:94:2e:30:
                    63:9f:82:73:57:2a:e4:0c:b3:34:87:9d:80:22:1b:
                    af:4b:80:d2:72:01:aa:1f:3d:d6:95:72:15:7a:6b:
                    e6:74:66:1e:a0:6b:44:e7:b8:48:82:84:97:de:f2:
                    be:8b:36:5f:78:4b:fc:28:1c:4d:98:15:13:dd:7b:
                    ec:5f:a8:88:fe:a6:e5:98:02:61:58:c8:8e:9a:91:
                    fa:6d:3b:b0:cd:21:08:49:3d:77:03:0f:f7:be:6a:
                    26:54:2f:fe:ac:7b:7e:41:76:cd:77:46:fb:5e:ca:
                    1f:f9:2e:f9:90:1b:57:4c:3d:df:60:db:59:c6:3a:
                    2c:27:b5:3b:1d:0d:b3:c2:5f:6c:5e:ca:ba:a9:b0:
                    ad:17:02:aa:3e:0b:71:9f:68:4a:a9:a3:bb:63:e4:
                    6d:31:4e:d2:aa:93:55:99:4f:34:29:2a:16:4d:cb:
                    31:03:73:eb:01:cc:0d:fd:a9:ce:bd:4f:b6:45:87:
                    3f:0b:22:1c:3c:93:98:ab:be:b4:14:7c:ec:17:bd:
                    50:73:d9:96:91:53:d8:93:ca:e3:ea:6f:80:92:8c:
                    56:95:09:b7:72:cf:43:8c:b4:3d:4a:17:ff:a3:e4:
                    81:9e:a1:93:37:d2:a8:95:7f:11:1c:07:79:e7:be:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0A:C4:5E:8B:E5:9A:C6:84:65:F0:94:B2:83:14:C9:43:3E:F3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3411e9b9-a14f-3453-8232-9d7197938dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c008::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dc:d7:e3:af:e1:98:ea:01:92:c6:26:eb:23:6b:a9:0b:c3:
         65:8c:b4:bb:ab:16:be:f6:b0:73:e1:88:2f:eb:88:cd:09:e3:
         1a:1d:fe:09:4b:5a:e4:90:58:a3:47:97:10:f9:72:bf:8a:4a:
         a1:7b:9b:72:30:3b:de:ef:14:3c:b3:c4:2c:7f:ea:81:49:89:
         05:ec:a9:92:80:1f:54:54:e6:c5:e5:6e:24:3d:e5:13:10:95:
         89:04:7d:df:1b:ac:9a:0c:17:3d:75:e7:80:c2:1c:d1:3f:93:
         03:00:12:f6:9a:c2:8f:09:53:f7:22:14:72:77:da:dd:32:db:
         b1:b8:80:0e:4e:fc:53:58:b2:7c:aa:b2:ae:85:e4:7d:4a:f9:
         6e:2a:ad:ce:d6:f9:53:43:f6:72:0f:ad:46:78:ba:f4:c3:db:
         8a:26:5d:20:15:6f:58:d6:91:44:7a:ff:bc:e1:d6:92:54:ba:
         aa:9e:fc:a6:f6:1b:05:ab:a2:4d:61:b9:67:57:e7:9c:61:02:
         06:95:78:3e:ec:e3:2c:ef:d7:55:3b:84:0b:00:5f:b8:c8:eb:
         dd:55:e2:9a:0f:e8:69:16:27:c9:5d:40:b1:0d:8b:1f:87:c8:
         76:03:b3:7c:27:b5:58:96:1e:17:68:d2:79:f6:ee:01:f2:67:
         70:fa:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:23 2025 by rpki-client