Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa
File:                     c4511c46-226a-385f-bd4e-32968b99e6fd.roa (raw, json)
Hash identifier:          dSUNlf5LFkG4nZHfpaVX3MQr3wIH7+3NXcsAOfCV7og=
Subject key identifier:   ED:91:3E:57:A4:AD:55:B2:4B:FD:65:4E:FE:28:DC:F4:3D:2B:42:FA
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584AFEE69D0F735C5EB40D2D5A80
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     88
IP address blocks:        2620:c4:0:100::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:9d:0f:73:5c:5e:b4:0d:2d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=1a0fdf86-9c32-46b4-be43-f25acd137168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:54:67:eb:14:03:45:4a:2c:c1:e3:e3:97:
                    6f:80:f9:b0:88:f6:bd:10:b9:eb:f5:bd:04:6b:5b:
                    a3:29:c7:3f:e2:3b:bd:48:3e:9e:8e:bc:0b:a7:74:
                    9c:a1:37:2f:f6:98:d6:42:eb:e5:8b:22:a6:50:2b:
                    81:47:b7:a2:b4:c8:d3:40:ff:c3:0b:b7:8b:93:2f:
                    ef:4c:1d:26:14:91:06:2b:43:18:f0:c0:aa:2c:78:
                    04:b0:cb:1c:1e:59:93:0e:10:de:87:c1:17:af:e2:
                    5c:eb:a9:c0:c6:3c:2a:e0:e9:e1:21:aa:db:c7:c3:
                    fc:0a:ec:47:42:e3:a1:35:34:95:96:db:29:d2:6a:
                    53:65:78:8c:0a:63:aa:4d:03:ff:cd:a5:14:b4:0d:
                    00:8d:91:5f:ca:33:99:1a:bb:c2:7b:4f:d0:34:35:
                    02:7e:2d:90:1f:55:5d:91:44:51:4e:5c:c5:37:ac:
                    48:ad:d9:b6:c5:83:83:ac:9b:57:71:02:22:00:33:
                    31:91:94:aa:18:91:58:24:fd:f0:b4:6a:5d:97:65:
                    ce:d8:17:6f:da:83:c7:47:37:2c:96:7d:2b:01:6c:
                    59:7a:65:5e:76:e0:1d:00:21:bb:49:e4:b1:4f:f2:
                    be:2f:e7:c2:35:aa:42:0f:54:dd:4d:0d:6c:b8:97:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:91:3E:57:A4:AD:55:B2:4B:FD:65:4E:FE:28:DC:F4:3D:2B:42:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c4:0:100::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:6b:de:1b:dd:d7:59:4e:5a:49:f2:e7:c3:e3:78:24:4e:
         1a:81:fa:24:b4:b3:f8:7f:ac:cc:93:1f:64:de:3d:34:5a:be:
         12:66:5e:0f:6a:0c:15:9c:b5:30:ed:27:34:c3:e2:8a:2e:92:
         65:2a:b3:06:8d:1c:f0:4a:8a:47:08:bf:5b:3a:b0:59:91:26:
         cd:01:3b:3b:5a:3c:fd:1c:e5:93:5f:fa:e1:0b:8a:c8:99:1f:
         12:f3:30:f1:db:09:39:e1:3d:8b:d3:97:3b:6f:73:48:e4:12:
         db:61:53:b0:a7:7e:7e:a9:b2:62:5f:fc:6c:01:cf:f5:00:1b:
         09:40:3d:95:c0:58:fd:17:02:a4:d1:38:33:5e:fc:63:13:a4:
         63:d1:7e:a7:2d:35:3f:e3:d3:4e:54:9d:f8:57:53:26:27:9a:
         3d:d3:4b:9b:e0:4e:63:cf:69:d9:10:d5:d6:16:27:a7:5d:87:
         64:05:27:2f:27:01:1c:f5:47:d7:f2:f7:8b:c5:4d:b1:e1:80:
         78:9d:9d:56:1c:51:af:c7:48:8f:67:9e:f2:df:65:1e:eb:03:
         3f:59:e5:19:ab:cd:da:92:e0:30:40:e4:08:9f:b2:2e:3b:66:
         ad:6f:9a:bc:5f:fb:4f:ee:bd:50:a0:c3:bd:18:d6:1b:d5:a4:
         d9:1b:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:20:37 2025 by rpki-client