Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
File:                     52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa (raw, json)
Hash identifier:          5xRFrKSM6222b64xbNp4VKV/ili5d77FSTBj/bjxye8=
Subject key identifier:   86:80:5E:B8:BA:12:0B:7F:40:42:F3:7B:AD:79:5D:8D:72:10:2C:0A
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584AC876547854985A99978993C0
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     400718
IP address blocks:        2620:73:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:54:78:54:98:5a:99:97:89:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=fc238564-4ff8-4d7f-8e39-6a3a42956278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:a0:d2:62:30:a2:6a:78:08:04:4a:4c:9d:
                    53:df:a7:ea:2c:8a:7f:97:c3:1f:02:80:73:69:b4:
                    93:15:8a:69:0d:50:1f:44:72:67:74:a7:c6:42:35:
                    57:82:4c:aa:7d:6d:62:14:fd:38:42:64:55:70:0a:
                    be:b8:2e:4f:a6:df:d5:27:fc:19:7c:c7:28:96:80:
                    fa:23:f8:32:7f:c7:3f:db:8e:51:e7:f4:d0:64:aa:
                    8d:6f:1b:cd:d2:76:6c:84:b3:5c:41:04:2e:1d:52:
                    af:39:59:56:be:ac:f2:9f:ff:cb:3b:a2:b6:70:f2:
                    8e:27:b5:d8:e8:7d:22:ae:e0:d9:77:52:11:d1:71:
                    47:1a:19:a9:9c:37:82:18:63:07:7e:e7:ed:90:8e:
                    4d:d6:00:9b:5d:42:71:8c:d7:99:bc:38:d5:0b:e7:
                    de:af:e7:ed:d5:02:fd:ee:3c:9a:c0:a4:47:e5:b6:
                    1c:37:75:79:07:24:0f:75:15:ef:a0:f6:d2:2a:a6:
                    a0:84:84:75:fe:c0:80:1e:6e:c3:70:6e:15:5f:22:
                    f0:b4:af:7c:24:42:94:d6:c1:5b:be:68:60:7c:9b:
                    07:30:cb:59:da:7b:3f:ce:29:c7:b1:52:ca:bd:2a:
                    c9:99:7e:fc:c5:7f:1d:c9:d4:59:8e:d1:e0:cd:1c:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:5E:B8:BA:12:0B:7F:40:42:F3:7B:AD:79:5D:8D:72:10:2C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:73:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:3e:43:0b:54:d1:a3:73:00:e5:c4:95:60:dc:ac:23:fb:
         42:b5:81:78:54:6b:1a:4f:34:c8:99:31:05:d6:ea:43:7c:e5:
         b9:8d:41:ec:81:b9:bd:5f:a2:ee:0f:9d:64:d7:85:07:3b:31:
         2c:13:71:59:a4:10:96:bb:9d:da:9b:80:c4:d3:ba:79:a2:49:
         29:56:74:50:f5:46:7f:4b:c9:f5:a4:4c:84:60:b6:5c:3a:4c:
         28:8e:20:88:c4:d7:7a:30:89:bf:d4:d9:a0:55:88:21:5b:7a:
         9a:8f:01:47:59:81:a9:64:92:ec:b1:d9:4f:3f:e8:be:fd:8f:
         8f:4f:32:f0:7e:3e:8f:0d:30:27:5c:16:ff:fa:13:4b:1d:66:
         46:9c:bb:b4:30:ec:ee:0d:ff:25:65:2c:cb:a3:df:c6:0f:fa:
         5a:f5:6a:64:af:80:58:23:81:41:30:bc:96:4d:53:b7:62:69:
         7b:64:43:0d:e4:a5:67:64:7b:71:16:77:87:1e:e9:4c:ea:92:
         7b:da:18:cc:1f:cb:fb:dd:9c:14:df:c1:49:52:c1:0a:2c:fc:
         54:2b:70:e1:3d:70:f2:83:de:f3:c5:0d:dc:e6:5f:b3:f7:74:
         1c:ec:21:21:61:f6:49:11:ef:53:54:27:98:d4:71:8b:5c:0c:
         e2:6c:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:39:53 2025 by rpki-client