Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa
File:                     ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa (raw, json)
Hash identifier:          P9vzAVBQ3mtazEfDjlI1O7bfl0ZxKJxMwN9CLdYwpIY=
Subject key identifier:   00:F1:B1:07:EF:45:73:3E:5B:6E:32:08:75:52:7D:3E:C8:8D:30:65
Certificate issuer:       /CN=624ed502-24b2-4939-bd7e-39531ca3404a
Certificate serial:       010D0C9F4328584B047C22FCD0A7F86E148BCAE0
Authority key identifier: 9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2620:fe:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:22:fc:d0:a7:f8:6e:14:8b:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ed502-24b2-4939-bd7e-39531ca3404a
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=9224fb1b-e7f9-4771-8073-6304a3f7c04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:3f:ed:8a:82:b3:2a:3d:0e:03:8d:c5:20:
                    89:15:69:cd:7b:bf:2d:98:48:d4:f1:88:59:ba:ad:
                    12:19:17:93:9e:99:49:44:6f:05:90:0d:f9:fe:d9:
                    fc:46:6b:1a:8c:e3:72:01:2a:32:5f:25:42:f3:56:
                    33:c7:ce:90:5c:23:21:1b:73:f9:10:54:64:23:b4:
                    c7:56:dc:df:cd:71:82:78:91:c1:29:f4:21:50:d4:
                    7e:4c:8b:2a:35:9a:d9:83:d3:82:3c:ac:4e:c9:1c:
                    73:21:d6:3c:ed:d7:aa:9f:7d:94:6d:77:7d:bd:40:
                    02:9d:77:ee:37:8e:60:78:da:12:6d:94:8d:06:8f:
                    d7:e2:5d:01:62:96:0c:58:e3:fd:77:71:c1:3b:c4:
                    92:a4:9b:36:41:eb:f9:33:86:64:d6:3a:f1:66:0e:
                    30:e1:52:e0:23:9c:fc:3d:48:d2:fe:34:95:c0:5d:
                    c1:43:f5:20:94:df:56:ae:65:0c:a8:67:fc:5c:b6:
                    02:92:d0:10:6f:b5:24:1c:01:8c:4a:18:32:d1:96:
                    17:8d:58:41:35:e3:5f:e4:88:ba:78:e2:a2:8c:16:
                    28:85:3d:bd:db:49:1b:bf:e1:d4:80:28:7a:a5:5c:
                    3e:46:81:d1:85:38:4d:5a:bd:51:01:fc:4b:04:65:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:B1:07:EF:45:73:3E:5B:6E:32:08:75:52:7D:3E:C8:8D:30:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl

            X509v3 Authority Key Identifier:
                keyid:9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:fb:f9:92:dc:e3:6e:b1:b2:70:01:4b:78:60:19:54:bd:
         d1:cc:4a:7a:e8:85:df:ec:94:09:d5:92:41:62:6c:e7:ad:b6:
         e6:7a:80:b8:0c:a8:ba:31:8b:b5:4a:d2:82:2c:39:98:26:b4:
         70:b5:73:86:46:da:40:5d:3a:b3:5d:bc:7b:51:52:fb:bd:e9:
         04:2c:85:56:fe:91:ca:69:42:cc:b1:01:d2:e0:79:07:9a:21:
         c6:a6:7a:b3:d6:cf:69:9a:b2:93:04:bb:72:a3:a5:dc:4b:d6:
         75:34:3b:91:77:87:7f:2b:92:c6:41:0a:ee:9e:57:b8:24:cd:
         2d:03:1e:6b:12:36:ce:ac:be:c3:fd:b6:3b:b9:0f:a1:42:45:
         88:e9:00:da:e0:1d:49:e0:76:8f:c9:c3:be:85:5d:70:81:42:
         a7:ea:00:10:e5:9f:64:b2:dc:68:24:1c:f1:c2:25:27:47:40:
         bf:ee:49:b6:57:3a:5c:60:64:32:10:94:b0:6b:c6:ac:2a:51:
         ba:27:eb:82:43:e2:0f:8f:a0:42:54:f6:51:a1:9a:93:5d:53:
         4c:c8:df:74:14:42:9f:4e:e9:93:f3:50:06:23:63:bc:f6:f9:
         5f:f0:08:50:3d:73:50:45:ca:19:4a:72:e1:33:f4:50:74:27:
         02:5b:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:58 2025 by rpki-client