Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f2031bb6-e40b-3eb5-8d61-41c974cc1a8b.roa
File:                     f2031bb6-e40b-3eb5-8d61-41c974cc1a8b.roa (raw, json)
Hash identifier:          /O5SRhaHbxUh+HXPEm0jZ07JsEyZha/bqfsrbfGfAkE=
Subject key identifier:   F8:AD:95:8F:EC:D8:98:19:3F:1F:A5:09:50:F1:41:2C:CD:55:E6:84
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6D95C21E96A897BB13200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f2031bb6-e40b-3eb5-8d61-41c974cc1a8b.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2620:11a:c010::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d9:5c:21:e9:6a:89:7b:b1:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1c4a47c6-488c-4601-bd6a-7dc8c055817a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:5b:cd:c6:a9:94:bf:e6:8c:52:c2:e6:08:
                    b2:41:c5:e1:56:b7:dd:e4:ef:b8:c8:4d:f5:02:1e:
                    67:a4:44:d5:5c:42:73:44:b5:f4:62:26:08:e3:52:
                    2d:8f:87:69:2e:02:c9:93:cb:31:5c:d2:25:ce:b1:
                    8c:51:56:18:bc:d8:8c:8c:39:87:c8:3c:9d:63:fb:
                    3d:28:b5:b9:92:06:65:b1:7d:07:71:0d:8e:53:e6:
                    62:a0:63:0c:ae:1b:10:5f:0a:60:a1:a3:c7:e6:db:
                    86:dd:67:88:8b:22:39:b1:5e:b4:b7:7d:2f:10:8b:
                    22:1b:05:11:c1:d3:05:f5:8d:d1:81:50:46:06:1e:
                    3b:d2:07:a9:66:94:02:92:74:92:72:2e:66:9c:59:
                    57:c4:66:02:71:64:5b:50:5f:7d:11:95:9a:55:5d:
                    52:e7:03:8e:27:58:de:72:67:6b:a6:db:a0:b4:ce:
                    ec:15:1a:a8:b3:8b:e4:8e:e3:74:6d:06:ac:8c:fc:
                    5e:34:7e:9e:01:74:47:3b:16:28:7a:b6:dd:e5:97:
                    44:f9:25:a8:4f:f3:9a:cd:c5:d3:53:99:51:f2:05:
                    9e:7a:fa:f2:30:ba:66:a5:19:22:07:dd:b9:27:7d:
                    c4:e0:26:9d:b6:6f:3d:85:94:80:cc:af:74:ef:04:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:95:8F:EC:D8:98:19:3F:1F:A5:09:50:F1:41:2C:CD:55:E6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f2031bb6-e40b-3eb5-8d61-41c974cc1a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c010::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f3:51:1f:5d:4d:0a:47:41:d7:e8:01:84:56:b2:4d:c2:9f:
         b3:35:72:59:21:4d:f4:37:74:0b:42:48:88:58:10:17:56:a8:
         53:e3:8e:88:83:84:98:7c:ce:03:5b:ba:c7:0e:7f:46:4b:2c:
         3a:fe:16:34:bb:3c:64:00:72:08:b0:e3:0c:09:c9:08:23:62:
         00:3a:02:c2:0c:bd:fb:06:12:dc:0e:9f:4a:03:64:e1:ef:58:
         a8:58:89:04:0a:ad:7f:da:2d:dd:0f:63:78:07:6d:3e:9b:af:
         57:4b:bc:ef:aa:3d:d3:41:f5:54:30:5c:48:6f:72:43:28:b0:
         b5:31:d3:ea:a5:e2:ef:3f:fe:77:42:0a:ed:ee:d0:66:c7:90:
         04:bb:d3:e7:33:ad:63:7c:21:b2:6c:24:fc:50:f2:d1:fb:a2:
         db:2f:73:2d:b7:66:fb:e0:9a:77:67:76:82:36:2d:d8:03:d6:
         e1:e4:c5:66:50:2e:28:bc:53:ea:d6:88:5c:fa:a4:a6:31:ff:
         02:50:fe:f0:60:05:6f:f3:19:e4:75:98:dc:43:21:34:65:fc:
         db:d5:98:0d:c1:2d:94:88:6e:ac:f4:d0:f0:7a:4d:14:dc:e0:
         21:ae:31:5e:3c:7b:4d:ec:d1:7d:11:3d:55:7b:22:84:a8:28:
         4f:aa:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:25 2025 by rpki-client