Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa
File:                     342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa (raw, json)
Hash identifier:          /2pmNWGguN0ypbrr3tssFA+S7DhYOCYLEdndtG/To6A=
Subject key identifier:   E8:03:4A:D6:4D:BD:F6:97:BF:98:06:85:6C:9A:21:9A:31:EA:56:4D
Certificate issuer:       /CN=56346803-30d8-4fc8-bed2-9b76d8093c65
Certificate serial:       010D0C9F4328584B1806DB68F2B18078EC5DF340
Authority key identifier: E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     15318
IP address blocks:        2620:0:2220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:db:68:f2:b1:80:78:ec:5d:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56346803-30d8-4fc8-bed2-9b76d8093c65
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=705132d0-411d-4108-aaa6-81441eeff2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:a5:7a:41:81:e9:e0:6e:5c:29:48:c4:d1:
                    99:a4:28:64:8e:ee:24:74:21:9c:fb:97:ff:d3:ba:
                    f2:e6:40:75:1f:b0:f9:91:71:43:9a:61:29:1c:09:
                    49:5d:ee:a6:ba:b3:b3:c3:d2:9e:23:ee:e9:60:53:
                    68:aa:39:88:36:ea:ba:1f:bc:fb:32:60:de:88:26:
                    3a:0a:ad:1a:b1:cd:7e:c0:db:7b:b0:eb:72:99:e8:
                    42:3f:c9:0a:09:2f:b2:af:24:12:4e:b3:56:21:85:
                    92:b4:20:32:75:28:f8:a6:f5:6d:88:33:23:2f:a4:
                    aa:61:5c:24:47:9b:d2:49:87:79:44:2c:25:51:1f:
                    9d:39:79:26:70:8d:0e:47:97:fb:2c:cf:50:31:70:
                    d7:40:6a:e0:e4:dd:91:c5:88:7f:db:1a:a7:78:d9:
                    55:8f:b6:11:96:aa:0b:2e:aa:4c:36:78:cf:b9:ff:
                    19:9d:b2:fc:29:8b:59:31:0d:3a:59:9f:ad:3c:49:
                    d3:e2:00:4c:44:db:a5:9a:44:c5:17:98:e3:c6:bb:
                    06:3f:24:6d:d7:91:5a:65:d2:ac:41:4d:29:54:70:
                    9a:e8:ab:d0:c8:24:42:5d:64:32:6d:77:93:73:c3:
                    f7:ad:6b:f0:19:c9:69:bf:d4:4c:41:b4:a5:12:f9:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:4A:D6:4D:BD:F6:97:BF:98:06:85:6C:9A:21:9A:31:EA:56:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:83:ba:dc:24:dc:64:19:01:bd:a2:d9:79:c3:3d:41:1b:e2:
         26:9a:d4:9d:b6:b8:d4:94:2e:a0:e2:a1:c0:17:71:1e:91:32:
         84:7b:c0:6e:0d:b6:15:35:c8:a8:d4:61:05:bc:e4:67:67:4a:
         e8:0b:38:72:65:5d:59:bd:78:08:4c:2f:cb:61:31:7c:25:93:
         14:4c:30:10:b2:a0:a2:1e:a9:5e:9b:50:38:b1:b4:04:25:e9:
         c2:86:c1:af:a3:ca:ad:b6:75:17:11:43:a0:94:25:87:1d:8f:
         0a:e2:70:30:28:f7:f5:5b:e0:f5:aa:cf:3e:2f:e3:6d:53:9f:
         6a:5b:6a:51:f7:1f:00:af:d1:54:2a:4c:c2:b2:37:b3:ec:56:
         bd:53:47:c1:25:b8:58:12:0b:24:db:77:a9:37:ed:88:b5:bd:
         68:86:dd:4c:44:cc:c9:f9:59:fc:c6:b7:f9:a5:af:24:83:87:
         ac:08:b9:5f:fc:80:af:68:68:fe:aa:8f:4b:fe:15:1b:c6:53:
         f5:6a:78:dd:1e:4a:8e:e0:fe:92:00:26:8f:ac:58:9c:0c:3c:
         f5:2d:54:c4:c5:50:21:57:60:ad:e5:79:0c:83:1f:ac:b2:c3:
         0a:9a:8a:27:b6:d4:43:1b:12:0d:22:77:71:be:5c:ba:50:0d:
         6c:fe:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:04:58 2025 by rpki-client