Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
File:                     7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (raw, json)
Hash identifier:          wVhlKz60FxOSd8NzYqtHnTSXhpUqULxWmf0v19g2gPY=
Subject key identifier:   47:39:AE:AE:D0:C0:27:6D:01:6D:48:38:F6:4D:EF:50:E9:AF:C2:48
Certificate issuer:       /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial:       010D0C9F4328584AE3D7BF4EF974B9E615B3A040
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     396982
IP address blocks:        2620:ce:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e3:d7:bf:4e:f9:74:b9:e6:15:b3:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=8e2d342b-1d6f-44aa-8be0-17f9f97c0b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:fe:6e:b3:5a:63:2e:96:b6:e1:b8:c4:fa:
                    ab:32:c8:ee:10:0f:41:ae:1a:af:9a:b8:83:27:c0:
                    d0:f5:82:26:e3:77:38:98:dc:c0:87:87:d2:f9:68:
                    5d:70:86:c5:5b:4e:fb:b2:97:53:ba:78:bd:18:23:
                    c0:ee:4f:a0:a3:a7:2d:fd:2c:6c:91:dc:9c:e7:6d:
                    2d:c4:08:ae:34:03:8f:e9:a5:22:6e:d9:12:31:9e:
                    a2:b6:e1:e0:54:43:52:1e:c4:0a:1d:1b:26:cf:71:
                    09:2e:44:71:de:4f:69:1e:88:4a:29:56:36:e4:56:
                    1b:2c:30:50:a2:89:08:42:51:f5:96:64:50:55:6c:
                    72:71:de:06:17:d7:2c:2f:9d:7a:0d:3a:6a:7c:05:
                    3d:91:66:3a:0a:3f:d9:7c:a8:ad:83:cc:bf:f6:80:
                    1c:7e:7b:16:6f:18:82:4d:9f:df:6a:d4:f1:2b:d4:
                    65:0d:32:bf:61:36:7b:dc:df:cd:f0:ea:a5:d7:a2:
                    13:ed:f5:b4:c7:15:3c:b6:33:7a:86:ab:50:65:24:
                    92:f2:fe:8d:31:c1:59:c5:b4:ae:80:82:96:6f:cd:
                    5f:ba:39:1a:ba:f3:12:2a:af:c7:ab:55:6f:3d:6e:
                    0e:1e:8e:20:11:79:fd:82:70:1a:46:c4:fe:95:93:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:AE:AE:D0:C0:27:6D:01:6D:48:38:F6:4D:EF:50:E9:AF:C2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl

            X509v3 Authority Key Identifier:
                keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ce:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:aa:d6:11:5e:32:1d:e9:49:14:f1:5b:fe:fd:9f:01:73:5e:
         df:5b:11:08:8a:7e:da:8c:7c:47:ff:77:d1:42:e7:5c:16:6c:
         6c:2f:4f:ab:17:2d:92:23:a7:6a:e2:a3:de:a0:8d:d7:54:da:
         6a:19:d6:d4:7f:5f:41:85:2f:8b:bb:c3:e7:92:70:04:f8:ae:
         bf:34:c4:86:8e:46:16:6b:7b:3b:91:cd:3f:2d:5d:42:16:23:
         a4:39:46:f5:a0:58:58:05:a0:03:3c:a9:17:df:5a:e0:10:ed:
         4c:34:80:ee:73:f5:86:d4:72:c4:32:d0:c0:c5:c3:ee:88:34:
         32:b7:b5:dd:01:ce:55:62:ea:05:7e:bb:de:9a:1a:9d:b1:08:
         5b:ba:9f:9d:f4:72:b3:c5:d6:d5:3a:7e:32:3c:57:ce:9d:0a:
         bd:65:4e:51:b9:e8:f4:60:e9:73:ff:5c:67:1c:d4:e3:97:fa:
         90:3a:10:bd:c1:e7:c5:94:f8:05:6c:88:ae:e1:c4:cc:85:81:
         fb:c6:95:37:55:bf:79:34:1e:1b:df:19:e8:11:16:32:26:10:
         ed:2b:b3:92:e1:f4:f7:0f:1f:5c:5a:88:69:33:10:85:2c:bb:
         e0:e9:6b:6f:ff:c2:d9:bf:17:bf:87:0d:3d:e4:f7:b1:3d:5d:
         68:e1:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:40:02 2025 by rpki-client