Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
File:                     8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json)
Hash identifier:          Bkdhox19R4mKpOicCzqty8nKjMjUujYDok+eYtE2r68=
Subject key identifier:   5B:8B:74:A6:53:35:2B:26:7A:73:38:00:D8:C2:43:89:C8:75:43:06
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584B21CC17CABBD02AF1C67CF080
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     3755
IP address blocks:        2620:f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:17:ca:bb:d0:2a:f1:c6:7c:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=4652c2b1-bf3e-433c-8c74-f869599ce074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:c8:d0:b5:0e:90:ee:b1:8b:a8:82:51:64:
                    ed:dc:f6:95:af:8f:3a:37:33:77:70:0e:d6:be:7d:
                    49:0f:46:c7:42:eb:02:8f:8c:e8:ae:9f:69:86:b4:
                    e9:2c:7e:c1:f0:66:5b:37:7b:0e:49:a6:a2:4d:01:
                    94:53:a0:79:4c:75:1a:27:9b:44:db:31:2e:00:86:
                    fb:11:59:f0:60:c4:0f:12:a1:de:ea:bb:48:0f:e5:
                    1d:b2:cc:1d:2c:47:c2:11:15:ff:3d:b6:fc:93:6c:
                    9c:a9:e5:f8:5f:e6:f3:f8:57:13:86:cb:58:2f:af:
                    69:e7:27:46:cb:e9:24:22:ab:4a:23:7b:23:40:3a:
                    c3:7d:c4:ac:38:40:dd:d3:70:c2:10:cc:19:7c:89:
                    2c:7a:f5:49:8b:76:66:2a:19:56:73:8d:42:b1:e7:
                    63:e2:51:8f:e2:5f:d7:c3:c5:d2:ad:c6:dd:d6:98:
                    90:15:a2:91:79:11:9f:a5:f9:d0:c0:7b:26:3f:a4:
                    c4:83:26:93:39:5d:9d:4f:f6:fc:e9:da:b2:4f:52:
                    69:33:03:24:7f:b5:34:4b:14:06:c5:28:47:57:07:
                    a4:cf:5f:34:de:ae:72:4e:79:84:1a:2d:a5:73:d6:
                    34:c6:90:64:a8:09:be:e3:df:1b:94:19:73:03:13:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:74:A6:53:35:2B:26:7A:73:38:00:D8:C2:43:89:C8:75:43:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:9f:3c:cd:97:0c:21:e1:db:f8:63:25:e5:7f:ab:2e:0b:
         5f:19:45:4e:5f:6b:6a:bc:b7:23:a8:35:ad:42:35:02:95:6b:
         7d:d6:b9:77:e6:ca:dd:70:b9:e4:a6:3e:8b:55:44:88:72:47:
         4e:3f:f6:75:7a:a9:bd:ee:dc:c1:1c:9d:9b:9f:0b:bf:97:a2:
         dc:29:79:9e:93:0f:43:f5:84:73:2c:db:82:a4:b1:a7:8e:ed:
         03:60:8c:50:e6:33:f2:cd:76:b7:dd:54:87:0f:af:f8:13:ad:
         f8:e8:9f:69:25:e8:3b:5f:6d:a1:79:a1:66:d9:d7:b7:45:47:
         0a:92:71:6f:ec:7f:c4:c4:ff:38:dc:a2:68:58:a2:c0:23:fa:
         df:8a:f0:5b:d2:22:ca:d5:08:03:8e:68:ce:e1:99:b9:8d:c1:
         b3:44:49:0f:fd:a4:36:6a:30:73:d2:fb:94:0b:3e:1e:c7:06:
         95:3c:6d:15:dc:05:32:f7:f1:90:fb:8c:92:1e:ea:0e:41:f3:
         8e:81:7d:8f:11:53:00:2b:56:b8:f7:f3:21:3e:00:d2:68:e7:
         a1:0b:4d:99:d2:a0:65:c8:2b:48:38:90:0a:83:ce:92:66:64:
         8d:08:3b:2e:00:51:ca:47:b2:90:b6:16:f9:97:40:29:61:41:
         f9:8d:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:44 2025 by rpki-client