Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa
File:                     0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa (raw, json)
Hash identifier:          00uw7IVqsGeBgwMaTQoLQf6VPohExKdSADLSFvvI8I0=
Subject key identifier:   57:27:99:5C:2E:3D:41:9B:66:8D:54:5B:67:6E:7E:46:1B:49:5A:E2
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A90A0B7F62588201DDC47FDE8
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     394354
IP address blocks:        2620:10a:8055::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b7:f6:25:88:20:1d:dc:47:fd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=39f8b1f2-d65e-46a4-a4dd-e06467be7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:5f:32:01:9d:f5:5b:e9:b1:66:2d:b2:96:
                    c8:4c:4a:09:fe:c5:88:fb:cd:a2:28:b1:0a:7f:96:
                    ad:04:82:86:9b:94:9e:2d:ad:60:fe:f7:60:c5:db:
                    4c:35:10:4b:4f:9b:72:54:41:2a:2c:96:a3:a4:f7:
                    c4:b5:db:a4:e5:6c:61:0b:a1:58:0d:a9:60:95:c6:
                    37:67:bf:73:cc:dc:52:56:48:d0:df:2d:c4:45:a6:
                    31:b9:e3:b2:dd:50:98:ed:c6:b0:3f:3b:ed:20:45:
                    26:d3:6e:e8:99:ab:8a:5a:25:2f:82:57:7a:16:a0:
                    50:29:7c:c7:d7:1b:da:36:a2:3c:1b:f5:14:f2:fe:
                    c8:93:46:34:68:f8:99:64:cd:9e:c3:b6:b4:d7:b6:
                    1b:12:bc:ae:85:cc:88:21:46:93:61:ea:be:21:16:
                    c6:dd:67:6b:03:1d:c6:b5:93:0c:e6:96:3c:f9:36:
                    7b:f5:a7:de:01:e5:d0:c5:c0:d4:8e:13:ff:dd:fa:
                    28:78:b3:08:21:dd:8d:de:fc:58:87:31:94:e6:93:
                    8a:73:9d:35:1a:8b:53:b3:b8:80:63:cc:28:57:62:
                    16:cd:29:79:a6:84:f3:61:77:2b:8a:1b:69:64:fe:
                    18:c1:67:8b:72:ca:4c:13:72:29:7e:a9:8d:88:d3:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:99:5C:2E:3D:41:9B:66:8D:54:5B:67:6E:7E:46:1B:49:5A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0a9cfa9b-d00f-3966-b96b-272aac045ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8055::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:de:da:f9:50:e0:c6:72:a3:8d:0b:4f:b4:5c:f4:98:38:
         48:4e:9d:65:a2:05:1b:d9:9e:12:5e:99:40:e5:32:1a:26:ec:
         26:a1:e2:53:d8:cb:d6:3a:c5:46:4f:b4:bb:d4:23:b3:97:4d:
         9d:ca:e2:56:97:86:20:52:a3:f6:d2:6e:56:94:6b:0e:02:8e:
         f4:29:dd:f3:1b:b1:82:61:3a:14:39:be:6e:e8:56:15:1f:13:
         e9:7b:73:bf:a2:92:0c:85:ac:1c:a7:dd:75:4e:f6:d8:89:22:
         c5:fa:1e:4d:0c:33:84:45:12:5c:6e:8e:b7:e0:19:9d:87:e3:
         69:c4:cc:3c:36:fa:62:0b:54:24:19:a2:55:61:88:03:2e:15:
         42:fa:f9:fd:5d:df:1a:38:5e:77:72:93:7d:08:96:ab:01:91:
         99:36:2e:df:c3:4f:cf:3d:40:eb:35:06:68:fb:97:4c:f8:f8:
         a3:6a:c6:ef:4c:25:53:90:71:13:6f:2d:53:cf:07:f2:96:3c:
         4a:14:76:23:ca:c6:1b:20:41:2c:61:0d:8b:33:91:38:30:a2:
         27:78:ad:c3:ed:77:bf:cb:f6:a8:44:a4:e4:32:7a:91:42:ac:
         3b:34:75:91:c4:92:af:54:e0:35:09:bd:d2:c1:bb:fc:4f:d2:
         13:7f:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:53 2025 by rpki-client