Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
File:                     fae98359-f003-3f79-a8ba-12ae14bdda4d.roa (raw, json)
Hash identifier:          hb6Xmeo93p0LevN5in8TJ4Dz/QfbaB7TqErdZaSN2lU=
Subject key identifier:   56:6E:36:13:49:02:2F:C6:DE:42:08:52:BC:15:59:E5:5B:A7:49:F6
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584AF521717293DD9A83B839D780
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:71:72:93:dd:9a:83:b8:39:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=730da0b3-c6bc-4615-8649-c8e07c817ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0c:cb:fa:b9:33:23:8b:b6:35:4a:e0:0f:fc:
                    bb:47:eb:00:09:b7:ec:16:a8:1e:1f:ef:65:79:fe:
                    b4:61:6e:65:4d:72:d9:9b:8e:d2:23:e3:45:b7:d7:
                    f0:49:ea:81:c1:f1:d7:39:8d:4c:5b:96:6e:84:1e:
                    43:9d:e8:f1:16:be:a2:3e:0d:ce:b3:b8:52:aa:65:
                    b6:53:b0:3e:35:83:1b:97:d3:06:6f:5e:b1:c0:b9:
                    60:1d:85:00:5f:a7:cc:ef:16:50:6b:20:34:d4:a5:
                    ea:eb:f9:97:60:30:96:4f:70:60:14:97:35:f0:4f:
                    dd:3d:ec:8c:a7:71:71:37:c1:5c:da:3a:e7:87:a3:
                    fa:f5:a3:70:27:3a:3e:d3:d4:fe:65:9f:86:9a:bf:
                    0e:2c:c1:0d:ff:bf:47:00:79:fb:44:ff:f8:1d:6e:
                    01:39:de:0e:e9:5d:e3:e5:a3:42:4b:c9:08:b0:ab:
                    60:04:84:35:d7:53:ab:b3:33:a5:10:3d:20:9f:67:
                    24:0e:91:46:8b:8e:60:8c:69:31:67:fe:73:d0:aa:
                    ee:be:7a:1d:2e:61:ff:09:cc:61:65:8a:73:5e:9b:
                    67:67:d8:b9:bb:dc:5e:ce:59:fa:dc:1c:ba:db:32:
                    60:a4:a5:c9:24:a6:6c:bf:f8:49:fe:10:5c:c5:c1:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:36:13:49:02:2F:C6:DE:42:08:52:BC:15:59:E5:5B:A7:49:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:26:20:8a:2e:a7:65:9e:23:20:17:0b:00:3d:8f:e2:db:
         3f:03:bd:7a:f6:e5:34:97:08:7b:3b:dc:82:ad:57:a4:93:a2:
         25:5b:50:4d:5b:72:a8:1c:ad:41:c3:1b:8a:d1:a1:41:6c:04:
         5c:63:1b:3a:7a:e5:a9:68:40:bb:f1:b4:a5:24:9c:36:2c:0f:
         c9:0e:44:94:ad:46:cb:1c:60:62:2e:c0:04:a5:40:2f:fc:d3:
         7d:16:c7:15:ba:1e:a0:bb:30:b2:c0:4d:90:e7:1b:2a:fd:e8:
         e0:31:84:db:b5:d0:f9:89:41:4e:b7:92:5b:e8:a0:ea:92:0a:
         bc:9a:3c:93:c3:3b:42:9c:13:d3:6a:72:3f:ff:a3:b4:e7:16:
         f7:db:4f:5c:77:83:15:45:27:11:40:3b:f1:14:f3:b8:85:18:
         ca:28:b8:5c:6a:46:b3:64:4d:48:b6:c1:fe:1f:c9:b6:7f:15:
         60:af:98:99:94:b9:32:c0:0a:63:4a:1a:e5:24:5e:6b:16:73:
         59:91:1a:9d:3d:af:54:99:63:c9:0f:22:6a:32:59:98:14:3b:
         b4:ae:28:d9:7f:86:42:e0:6a:38:83:64:69:09:dc:54:d8:7e:
         72:2e:30:22:cb:26:8b:54:2d:c1:81:93:4b:5b:c7:43:17:dd:
         03:85:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:01 2025 by rpki-client