Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa
File:                     aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa (raw, json)
Hash identifier:          Xr3g4itDjKUnfEWESqWiU3f9vvn1b4sHqSo7BvqZ+x0=
Subject key identifier:   EF:3D:05:D2:CD:3A:87:49:22:60:ED:A9:EA:8F:CE:C4:3F:69:4B:0E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6D8CD9631B4404EF5A000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2620:11a:c04d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d8:cd:96:31:b4:40:4e:f5:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=27a15cb2-96e8-4070-9ddc-18470096c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:99:f5:6d:d6:3f:99:2e:06:21:25:6d:dd:
                    6d:a5:77:98:ad:9d:00:cc:c0:5d:ad:41:12:71:2a:
                    a0:a5:12:19:06:81:1c:d5:64:92:2e:47:3d:a6:49:
                    b9:ec:c6:58:65:1d:01:d9:cf:95:1b:9f:02:20:9a:
                    d3:28:08:f4:22:46:a0:d7:42:ef:3b:1d:7e:eb:a6:
                    e2:5f:4f:e6:04:43:72:7a:fc:74:21:57:0a:ac:49:
                    94:6c:8e:41:bc:8a:9d:f1:8b:c5:f0:5c:4d:a4:08:
                    d1:c3:71:f7:7d:93:77:7b:3f:30:08:fa:1a:23:7f:
                    cd:41:58:26:70:bd:b5:2d:7a:9f:84:4a:d7:3b:b8:
                    57:d9:3f:45:30:8b:67:ad:2d:fa:e7:23:30:d0:39:
                    8d:a6:71:fe:32:d5:7b:ae:2f:0b:3f:41:ad:c3:42:
                    8e:8c:77:e1:fb:26:6a:80:7b:6e:19:5d:7b:b3:60:
                    07:9f:60:5c:a8:07:ea:ee:c3:96:c5:86:46:86:a6:
                    f8:cc:a4:fd:19:42:ba:27:b8:e9:b3:2c:62:c3:c1:
                    9a:0c:25:2d:2e:74:e5:4c:70:ce:a9:95:dc:df:e1:
                    ac:32:c1:0f:7c:3b:18:ef:7e:2a:e2:d0:37:3c:92:
                    06:6d:0d:7c:77:17:87:9f:17:cf:a0:3d:85:1d:f0:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:05:D2:CD:3A:87:49:22:60:ED:A9:EA:8F:CE:C4:3F:69:4B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c04d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4f:54:cc:d8:b7:68:7c:58:2f:23:47:c4:03:2b:88:02:25:
         62:76:84:15:a7:41:89:68:bb:e7:72:c9:a4:6f:5c:13:5a:b4:
         c8:45:5a:93:ca:f7:5c:30:66:72:19:12:4a:1e:32:8e:e7:14:
         e0:60:04:c3:1a:5f:e8:91:f6:89:64:4b:9e:41:c4:06:e1:8d:
         2f:4e:ab:32:9c:c6:d1:1f:3c:b5:87:6c:fe:e8:d2:b9:29:28:
         42:66:59:d8:56:87:aa:8c:d3:f8:b0:02:a4:f4:03:4c:45:f6:
         94:f1:52:f0:7d:c8:21:c8:9b:24:a6:42:9c:0d:31:fe:c8:b7:
         92:56:20:8d:56:04:ea:df:0e:dc:cf:b8:83:7c:6b:1f:07:4d:
         0c:71:7b:97:7c:fc:f4:0c:b0:d7:7c:62:69:ad:20:23:63:96:
         c9:93:9e:43:fc:14:5e:5e:57:51:63:c3:20:66:fa:00:48:06:
         ba:e6:66:ba:e1:a9:c7:06:bb:46:f0:f9:9b:f6:49:b7:37:56:
         1d:d7:62:46:cb:08:8a:55:a9:94:53:82:6d:c5:2e:97:65:16:
         62:68:e0:55:b8:3e:ab:c8:ad:23:7d:bc:21:80:e7:d9:4c:7a:
         63:22:c2:32:ad:84:e3:3f:94:4c:ab:28:61:44:d6:68:05:c4:
         0f:43:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:03 2025 by rpki-client