Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa
File:                     d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa (raw, json)
Hash identifier:          r4HxN8E58hcHqGuhvvtLUgUufolnyB/Ldvt2AvWOHB8=
Subject key identifier:   74:6D:E7:A8:46:89:C5:8F:50:97:EE:F0:32:0D:B4:A4:E5:9A:07:D6
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584AFD92AAF418DCE420118F9DC0
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa
Signing time:             Wed 27 Aug 2025 00:45:10 +0000
ROA not before:           Wed 27 Aug 2025 00:45:10 +0000
ROA not after:            Tue 25 Nov 2025 01:45:10 +0000
asID:                     13737
IP address blocks:        2620:11f:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:92:aa:f4:18:dc:e4:20:11:8f:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Aug 27 00:45:10 2025 GMT
            Not After : Nov 25 01:45:10 2025 GMT
        Subject: CN=5f742bc5-885f-4110-b03d-49f4cd824408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:0b:3c:f1:3d:df:58:72:89:99:38:52:37:
                    62:8d:ad:33:32:03:50:a7:20:22:7f:15:d9:3b:0d:
                    07:c0:29:4b:15:c6:8f:7e:6d:3a:f8:9c:3b:c6:f6:
                    c8:ac:be:d0:c3:83:86:cb:b2:a6:c9:34:0c:7d:16:
                    35:e3:cd:a7:21:20:c3:c3:34:30:ee:75:3d:77:df:
                    36:78:a5:73:99:6c:f5:63:0b:7c:d3:b3:43:a9:39:
                    e6:0b:7f:6e:f8:13:85:26:71:7b:e6:4b:a8:55:6f:
                    57:31:ac:c8:73:7d:9e:0a:6f:d5:50:81:e4:08:f0:
                    c2:ab:f8:dd:32:2e:5b:4c:76:e2:29:d0:75:88:df:
                    29:e1:c0:00:00:ba:1c:4d:1d:d5:dd:a0:44:9c:05:
                    66:4d:9e:0e:33:48:12:3e:80:6a:55:cb:a4:a8:c8:
                    67:8c:6d:ea:40:e1:e3:0c:4c:bd:84:fb:64:20:39:
                    f8:b8:88:4d:dd:87:bf:8e:5e:62:48:45:76:9a:34:
                    d2:95:92:e4:2f:55:92:ed:d9:1c:38:42:6d:bd:25:
                    58:77:34:1e:2b:5e:27:a7:a3:07:60:64:64:f1:ce:
                    36:e8:40:47:92:09:77:f9:55:99:fb:ac:a1:61:8c:
                    60:5e:17:29:82:47:a5:b4:20:53:c9:4e:79:c3:55:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6D:E7:A8:46:89:C5:8F:50:97:EE:F0:32:0D:B4:A4:E5:9A:07:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/d3c28245-e5fc-3b78-a8b9-73b461d72d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b0:d1:dd:56:dd:99:67:a6:21:1b:89:78:b4:65:22:92:53:
         53:f8:58:15:3a:b8:ed:13:32:ee:df:f7:be:b4:73:23:e5:a4:
         8f:c5:25:8d:c4:ec:89:88:a4:a9:ae:b5:83:63:34:dc:ac:86:
         1f:9d:d6:6e:e7:83:a1:f9:0b:40:cb:35:12:15:99:e3:cb:fe:
         de:31:d4:32:03:59:c2:3f:d3:e3:7c:78:e7:54:3d:60:3a:6a:
         4c:c1:ab:24:b9:d8:46:b2:21:97:a7:52:90:4c:5f:f2:45:b7:
         db:34:49:e4:d0:84:13:0d:8b:31:c5:f7:2d:a3:e6:28:e5:44:
         2b:a9:80:7f:eb:80:5a:91:52:90:f5:23:ad:05:75:70:5f:25:
         ba:a1:18:03:67:32:81:47:6e:46:04:ae:93:3e:e7:66:1e:ee:
         2f:83:c9:d6:ba:d8:f8:dc:97:59:d0:15:38:af:99:00:f0:1b:
         79:b2:9b:75:11:05:4c:b8:b6:db:fd:89:62:a3:7a:42:b8:69:
         38:8e:2a:72:c8:50:c5:46:a4:a8:e0:fb:cb:61:bb:12:26:c7:
         bb:b6:80:f3:8e:85:76:67:f8:00:fe:fc:40:c7:1d:75:b6:a4:
         ec:99:d7:e3:15:9a:cb:37:c5:da:c5:92:69:eb:58:8d:c3:80:
         2f:76:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:03:38 2025 by rpki-client