Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
File:                     ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa (raw, json)
Hash identifier:          bkGK6rbzGtICMFP+L+3IZVy99FHSMuBpMskjqLo8+Tc=
Subject key identifier:   E7:0E:70:FF:4E:69:AB:2E:37:58:9C:A3:38:31:D7:75:80:01:36:B5
Certificate issuer:       /CN=d3d6dade-3164-4681-8f0a-34023fdf6934
Certificate serial:       010D0C9F4328584B25FC34C4EEE8346CCB06AE80
Authority key identifier: C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     26342
IP address blocks:        2620:1bd:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:34:c4:ee:e8:34:6c:cb:06:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d6dade-3164-4681-8f0a-34023fdf6934
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=97b0ff8d-6421-43d2-a235-d41decc25982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:64:ba:dc:35:94:e1:29:60:8f:79:4a:2a:
                    b2:66:bf:2c:eb:88:05:ee:bc:f0:d5:68:94:d8:90:
                    31:ad:6e:a0:a8:df:e0:8d:81:e1:96:5e:83:b7:b3:
                    51:da:e8:29:ca:5e:0d:24:01:a5:88:63:ed:1f:11:
                    2f:ff:58:43:2f:23:38:61:e5:d2:14:60:87:b2:85:
                    5a:34:17:41:5f:8f:2f:d7:9b:5a:35:82:69:14:20:
                    3b:20:1c:48:06:94:07:13:c9:c3:f7:b8:54:2f:a1:
                    e9:9f:40:04:85:d7:28:f0:fd:1f:1c:9e:0d:7b:78:
                    9e:f4:c3:91:57:72:84:37:66:fa:fe:4b:b1:ff:da:
                    22:8f:2e:e4:6c:21:7b:33:6a:40:fa:4b:6e:fc:27:
                    f0:e5:2b:ef:e5:d3:51:47:a0:c2:a7:10:cd:f4:cb:
                    36:09:fa:51:de:c0:b7:cf:01:d6:5f:f0:19:f4:88:
                    61:62:43:b6:62:20:cf:83:40:70:30:63:92:d4:6d:
                    79:1a:6d:c5:b4:3c:92:4b:25:79:51:63:d7:0d:75:
                    2e:09:b7:51:c4:ff:7b:66:0e:f6:8b:9c:8c:a2:44:
                    b8:2e:7d:90:0e:1f:3a:85:77:27:af:d1:44:70:8e:
                    73:80:e1:e9:fe:7f:05:4e:e1:d1:e1:7c:84:e9:4f:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:70:FF:4E:69:AB:2E:37:58:9C:A3:38:31:D7:75:80:01:36:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1bd:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:31:9e:43:ed:65:d3:0e:b8:8e:b8:07:10:f1:a3:a7:b6:
         1d:92:90:49:54:62:f6:f0:6d:ad:21:de:58:44:98:3d:c4:97:
         9c:89:a7:31:1b:29:13:28:60:06:10:d3:39:19:19:b5:a8:85:
         11:4d:d0:98:c5:ce:0a:5d:a6:ac:d6:df:e1:64:ca:32:e1:cb:
         3f:c5:e8:9f:5b:b6:20:5e:cb:61:eb:10:bf:d8:f0:9a:9b:41:
         7f:a9:e0:45:e2:8b:d1:25:e1:04:bd:13:47:a2:62:a7:78:8a:
         d9:17:83:99:c3:19:a9:00:1a:ce:06:b1:43:61:5e:ec:47:e4:
         f2:4a:f5:e6:94:7d:5c:75:5e:bb:69:27:16:6b:13:0b:06:73:
         ee:07:1c:22:64:24:d2:07:e3:76:1b:d1:b3:2d:c4:da:4c:e8:
         79:bd:c5:32:d3:14:52:24:e4:65:99:50:a3:83:e8:84:43:59:
         fc:fe:87:98:97:dc:5e:bc:0d:75:c4:ed:e7:c8:50:bd:c5:db:
         b1:6d:c1:0e:20:29:0f:35:36:49:db:ed:74:2c:69:84:4c:27:
         86:46:86:ff:e9:62:63:95:25:f4:b0:a6:25:8e:11:4f:f9:cf:
         20:2f:df:1a:71:ac:5c:15:21:ea:49:51:cb:eb:49:e7:7f:c4:
         6b:b0:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:22:18 2025 by rpki-client