Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
File:                     a31500f4-cfd5-3cea-b888-2f24641d721d.roa (raw, json)
Hash identifier:          NE+LXlFtm3kih7ofKMoulL46vo9fNLtdVeTAHCQz+xQ=
Subject key identifier:   13:F6:D1:E7:DF:B9:BF:6E:B6:3C:B6:AF:20:4A:D4:C7:01:3D:55:9E
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584B434C5D0C3447164C11A18300
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        2620:135:7017::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5d:0c:34:47:16:4c:11:a1:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d36f8c4e-cc09-4c49-aab9-03138db45f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:bb:40:17:81:58:66:bb:8f:5a:39:fa:86:
                    22:9f:13:e0:a9:b8:69:93:28:a6:5f:c7:73:85:04:
                    5f:03:12:d7:01:89:d3:e2:a7:9c:75:90:c0:d4:d0:
                    04:0c:62:e2:ae:a5:62:b5:32:8d:7c:10:68:40:58:
                    f3:75:d9:fe:79:fd:e2:4a:80:03:e3:09:42:27:c5:
                    43:15:12:95:0c:4a:ec:ca:b3:b8:5a:c9:bf:23:fb:
                    ab:4e:d6:d0:74:a4:5a:e3:4d:e8:fd:8d:6a:af:a0:
                    c4:58:1c:f7:f9:c1:7c:42:e3:5f:ee:b3:18:b0:86:
                    68:4d:5b:9b:00:48:7a:10:34:1f:8b:09:73:b5:9f:
                    aa:dd:65:45:5d:80:ea:ba:81:12:3b:d7:24:90:34:
                    92:ba:9b:b6:eb:b4:ea:27:26:87:ea:68:78:ae:64:
                    21:27:f9:fc:79:c9:b9:1d:4d:bd:3e:a7:7c:ba:66:
                    af:46:fe:f2:bf:58:81:c5:1f:21:8b:77:bb:82:c1:
                    45:d8:61:b9:78:dc:6c:ad:6b:6d:27:2f:e4:eb:9f:
                    3c:7b:8a:60:49:f9:4b:85:c3:9d:83:7a:f8:9d:9f:
                    c0:95:9c:4c:e0:9b:ee:a0:93:4a:c8:90:50:99:6c:
                    3d:ce:cc:72:47:d5:a2:40:81:05:ae:38:b9:1e:14:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:D1:E7:DF:B9:BF:6E:B6:3C:B6:AF:20:4A:D4:C7:01:3D:55:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:6c:52:e8:93:f2:0f:4a:d5:27:03:1f:c9:79:26:14:2f:
         43:13:5a:d1:df:70:5a:d7:1e:f3:33:f3:9b:91:a5:bc:a9:60:
         1a:c8:38:a0:00:54:9f:86:55:36:b4:a3:f7:00:e9:92:d5:42:
         fb:47:1f:08:45:75:0f:a1:d4:d3:ad:3d:65:88:00:e0:45:29:
         c1:1f:d2:46:54:43:19:dd:b6:c9:7b:ca:6d:0e:44:dd:2b:4f:
         9c:52:e2:70:a4:7b:98:7e:9f:8c:2c:83:4e:d0:e5:b7:3f:8f:
         9c:46:62:2a:f9:e5:00:e5:df:f9:04:d3:f3:a4:72:d0:66:2a:
         55:71:5c:38:dc:e2:2f:fd:a2:36:40:d8:22:72:e6:a2:6b:15:
         df:d3:c6:00:c8:18:72:39:cc:95:32:b0:f2:51:da:60:19:65:
         38:be:9c:65:00:fc:f3:b2:65:38:a8:39:96:c9:51:87:7b:70:
         d5:0a:ee:75:b8:d9:f9:d8:c4:6c:47:f8:92:9a:6e:fd:6f:20:
         a6:56:e8:b2:70:6d:24:87:b8:b6:90:b4:93:09:a4:53:6d:11:
         a3:76:b6:c2:ba:71:55:0b:ed:a2:ee:3d:e2:e6:b4:53:63:36:
         18:21:49:8e:c6:b6:88:2f:91:27:7d:e3:ef:67:01:8d:07:74:
         fa:cf:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:35 2025 by rpki-client