Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa
File:                     9aa1d08a-932f-3361-a443-5cd240a7b52f.roa (raw, json)
Hash identifier:          o4CUpCTjZc+nG94cOOC11lg6kLi9i/auVM0wKLS3DlY=
Subject key identifier:   FD:E7:9D:C2:55:8E:99:27:1F:55:BD:AE:D5:30:0D:1A:C2:49:5B:A0
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A7D15F6EBB3FBC709AC127280
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     55195
IP address blocks:        2620:10a:80eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f6:eb:b3:fb:c7:09:ac:12:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=06126034-4499-4a90-ba16-2a499fa03d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:a8:c6:68:75:e9:1e:16:f1:dc:91:17:27:
                    a5:6e:27:7f:0c:13:ea:5d:30:b7:15:06:22:82:1a:
                    d9:94:b2:59:ff:85:16:a7:18:96:cf:82:ad:8c:3d:
                    7e:ef:42:98:49:b5:0d:d5:fb:b5:69:4e:3f:97:9e:
                    77:17:4c:b3:0a:dc:c2:88:d7:af:eb:e6:e1:3a:80:
                    84:5f:0e:52:29:27:1e:84:62:46:5e:07:59:30:55:
                    9d:97:10:db:3b:a5:5f:69:41:3b:44:00:ed:48:8d:
                    f9:10:c7:5b:b3:40:46:e6:e4:ed:9b:3a:85:b4:4f:
                    af:f7:27:a2:c1:22:d6:05:b9:6f:15:17:5a:4b:f9:
                    57:c0:ea:5a:b5:3a:19:85:9f:78:96:9a:79:dd:82:
                    68:a7:ca:d2:ba:ea:cc:90:8f:06:99:7a:dd:ea:83:
                    01:68:18:c0:d3:fd:7d:63:3f:74:f8:19:e2:db:02:
                    5f:fa:8d:0d:30:ea:8e:f9:c5:2c:1c:1a:b0:30:4c:
                    bc:ee:f3:98:4c:b2:bb:a3:a8:e5:03:cd:9f:9e:6e:
                    0f:84:f3:c8:13:3e:53:a4:1a:1e:19:6b:5f:8d:3d:
                    c3:e1:07:00:f3:4e:26:d0:15:9c:c5:00:ed:d9:20:
                    8b:e4:33:c1:d4:dd:c9:5c:f3:87:d1:ac:db:95:28:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:9D:C2:55:8E:99:27:1F:55:BD:AE:D5:30:0D:1A:C2:49:5B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:72:96:c8:7a:f1:36:c7:80:d1:ad:92:07:a0:85:92:7b:
         c0:6b:1e:ca:ee:7b:ad:b1:93:0a:eb:5e:4e:db:ec:aa:16:bd:
         25:54:ce:70:01:35:b9:f8:30:82:79:83:69:48:b7:ce:ed:d6:
         62:ee:32:ef:c7:47:e1:de:23:27:f9:96:ab:1a:4e:71:26:68:
         e8:0c:58:6d:5a:be:14:5f:ab:1b:18:33:da:49:c3:bf:98:3e:
         ad:29:8b:53:f3:0c:4f:7a:1e:23:3a:ad:57:41:45:68:e9:fa:
         13:fe:63:d7:63:58:bc:1b:ee:8a:7e:79:c1:a4:9e:94:43:f7:
         28:e0:fd:84:23:17:53:89:2d:73:0f:0a:51:87:50:c1:f2:9a:
         47:e5:28:2c:48:3e:59:e4:fc:2b:a8:71:34:3f:23:91:1a:ab:
         46:72:17:12:5e:97:0f:98:73:b2:0e:53:26:5b:6f:bc:79:f0:
         b1:d2:29:72:3c:df:84:54:a1:d0:3b:ad:46:40:3b:44:dc:b8:
         90:88:22:52:76:7b:be:c7:02:59:57:2d:8c:2f:ab:fb:e3:e3:
         65:9f:bc:a9:ad:bc:92:c7:17:3a:61:e0:74:b8:65:32:7b:7d:
         8a:64:94:9d:59:ac:29:f5:64:f4:c3:1e:02:fc:52:35:7f:37:
         43:c2:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:17 2025 by rpki-client