Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
File:                     10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa (raw, json)
Hash identifier:          I8m/LmshAGXOSpOiOJih3KMwPxXMyPadWerQmdt4018=
Subject key identifier:   B9:D9:A0:7A:FC:B4:9F:C7:D2:8F:E5:2C:EA:0E:0D:BD:78:8C:D8:B8
Certificate issuer:       /CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
Certificate serial:       010D0C9F4328584AF52140DE450542E3E454A500
Authority key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        2604:1ec0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:40:de:45:05:42:e3:e4:54:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=22480a89-ca83-4e72-9e90-e7715d92b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:be:c5:2e:b5:05:91:06:eb:c4:49:89:ad:
                    89:32:e3:2a:58:dc:ba:a7:84:a9:70:dd:fc:a4:5a:
                    5d:94:65:b5:88:a4:e8:06:b7:d0:ec:07:e0:63:ef:
                    5a:ef:76:77:e4:35:db:c5:75:d5:40:db:83:1a:82:
                    64:d0:f1:67:c5:4c:24:2c:a9:56:31:fe:ff:9e:6c:
                    49:10:42:77:a2:e1:30:c7:da:c4:05:4d:64:c4:bc:
                    6e:2a:7d:22:a1:55:5c:d0:f0:75:da:62:bd:31:d7:
                    10:28:59:b1:d7:c9:16:4e:9e:21:57:50:d9:69:88:
                    e3:85:11:34:11:6c:d6:6e:5d:98:62:0c:28:d0:ad:
                    6a:f2:3a:02:e4:90:d1:db:c3:62:f0:02:79:fc:88:
                    b7:27:1a:54:1c:cd:4a:2f:a0:1b:0f:24:6f:41:a1:
                    94:f6:c3:75:4c:c7:4a:c8:d8:62:fc:fe:71:15:1f:
                    e4:7b:d7:ce:1f:ff:fe:eb:b4:36:db:aa:a9:eb:92:
                    93:61:b0:df:4b:e8:3a:e0:a9:77:b6:17:f8:aa:f7:
                    2f:d7:19:fd:e2:22:0d:c1:aa:81:f5:3b:9a:d5:73:
                    94:03:0c:e0:40:e2:57:41:6b:46:0e:04:f4:55:98:
                    fd:24:76:ac:bb:54:bd:65:04:52:bf:1a:28:e7:4e:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D9:A0:7A:FC:B4:9F:C7:D2:8F:E5:2C:EA:0E:0D:BD:78:8C:D8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl

            X509v3 Authority Key Identifier:
                keyid:26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1ec0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:0c:c2:62:ce:e9:20:15:a9:f7:b4:32:06:6d:7a:6f:a9:
         e6:67:4b:e8:15:51:a9:e6:22:11:ea:dd:18:1c:b9:6c:f1:ea:
         dd:e2:32:cc:a9:ef:99:7a:94:38:e6:c2:31:32:59:6f:d0:c7:
         1f:a6:62:f5:fc:b0:bf:b1:e0:e0:db:4d:a8:2b:25:19:b4:4f:
         5a:3f:be:1b:77:e4:d9:c2:95:b9:bf:d4:91:cc:e3:94:33:af:
         44:eb:17:8c:d4:74:cd:0a:32:9b:5a:c2:b9:78:7c:5d:71:9e:
         a1:3f:ee:b7:3c:c4:d8:f1:c7:8c:c9:bd:c9:ec:17:15:89:a8:
         7e:9c:ce:c8:ec:0f:3c:8d:18:29:c9:21:b4:ba:62:42:e5:05:
         69:9e:66:18:8b:7b:c2:66:0c:b9:91:c8:63:fb:31:ba:f2:b7:
         26:17:39:f8:cd:59:3d:fb:5e:1f:07:4d:a3:e5:fe:6e:b9:ea:
         f0:2b:79:dd:8a:fd:74:9f:ee:14:f6:62:b3:b6:0c:28:fa:5e:
         c0:3b:e3:f4:09:cd:6e:41:d4:ad:ac:a7:4a:f4:fa:ce:fb:a2:
         57:f3:0e:b4:b0:6b:59:8b:7d:b0:9e:50:87:6a:6b:08:c5:c8:
         7c:f8:a0:b2:23:e9:38:18:e3:22:8f:6a:c0:6d:92:60:63:6d:
         45:7a:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 14:30:00 2025 by rpki-client