Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
File:                     a32864a7-8943-31ea-94c0-9969594288ea.roa (raw, json)
Hash identifier:          hbI5YS/9EhfYrDg3ZqVYURDhIxPd647GLlbBzC5C0ug=
Subject key identifier:   D9:D4:73:D9:1A:F5:A8:B9:71:64:BF:A9:26:A1:C5:9A:C1:3A:E5:85
Certificate issuer:       /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
Certificate serial:       010D0C9F4328584B3AEC4576A3C1518178E80670
Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     33523
IP address blocks:        2620:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:45:76:a3:c1:51:81:78:e8:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=b2ce45bf-322f-4648-ad82-814c3e289227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:cf:a5:8e:56:b9:dc:83:4b:3b:bf:19:74:
                    2e:4f:73:3b:f2:44:4b:58:c6:a9:91:d9:de:f2:fb:
                    0d:8d:8c:e3:44:26:7d:e2:b9:b4:ec:50:bb:62:39:
                    b3:a2:ae:ec:9f:99:a1:36:1d:f7:d6:55:de:ff:b9:
                    17:e8:44:82:14:b4:7b:d4:33:5f:85:d2:58:7a:2e:
                    c4:7a:b7:5c:4f:d3:6f:9b:28:7b:b5:12:3c:9d:08:
                    c6:4e:63:5e:5c:9e:20:76:a4:53:ec:83:f4:ac:12:
                    6d:54:bf:c2:33:06:11:f1:48:c7:89:ee:25:1f:b5:
                    eb:f9:9e:d4:ea:d4:60:7d:9f:f3:b4:a0:f8:46:9d:
                    62:28:96:bf:9f:68:a2:3c:ec:30:b2:2e:56:1c:20:
                    0b:04:86:cf:47:2f:5f:3c:09:77:77:00:78:fe:04:
                    94:fa:61:43:a3:36:50:0c:57:e4:77:d9:90:11:c3:
                    86:10:c7:36:31:ef:e8:f7:13:be:0e:8e:f8:0f:73:
                    94:6e:ec:9d:c4:0b:8d:42:10:0f:d6:6f:11:b7:6f:
                    3c:dc:05:51:ea:5d:89:16:5a:a7:a4:44:ec:2a:a1:
                    f9:c6:18:04:17:f0:20:8f:d7:9d:12:fe:46:a4:21:
                    1f:2f:48:2c:e1:ee:19:68:a5:9a:b6:d9:70:dd:6a:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:73:D9:1A:F5:A8:B9:71:64:BF:A9:26:A1:C5:9A:C1:3A:E5:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:d9:72:30:f2:59:de:14:dd:a1:28:76:f3:63:a5:47:69:
         b7:1b:c5:14:09:4d:05:0e:3b:38:65:56:0f:0d:1a:27:5b:f2:
         20:73:86:cf:3a:e8:e8:e9:bb:b7:71:0f:99:75:6a:81:8a:be:
         7d:ba:62:8a:ac:96:77:fe:4a:4c:6d:94:11:31:ef:1c:1d:ca:
         01:6c:d6:87:a8:42:0e:ff:d5:9e:59:33:4e:fb:a0:10:51:52:
         c8:97:cb:3d:ae:6b:9b:40:20:c9:22:6f:1c:e8:53:01:03:20:
         b8:3c:ac:64:18:f3:92:d1:ec:f8:91:37:4b:51:66:25:9a:91:
         aa:39:98:42:34:96:6a:c6:b0:9e:52:a7:00:9b:ec:68:1e:a8:
         14:62:85:90:27:94:a4:85:0b:84:a1:cf:12:25:ee:4d:c8:b3:
         36:9c:df:fc:70:ca:13:87:e7:fc:ea:a4:52:d0:8f:e3:f0:ec:
         68:7e:ba:db:7c:b2:b7:91:a7:58:a5:cb:34:8d:c7:22:97:e2:
         16:ee:f4:00:de:75:3d:aa:19:38:07:95:c1:dc:1a:f8:3d:8f:
         19:a6:93:36:73:8d:80:59:12:a6:01:88:0f:48:e1:09:81:87:
         64:c2:02:71:bd:de:c5:ca:53:3c:25:53:f7:c1:d6:8e:a6:5b:
         61:1b:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:43:20 2025 by rpki-client