Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
File:                     d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa (raw, json)
Hash identifier:          KjW6lTaDO2icayRf4/C6eiZTBqRo61/jANfZ5XNywNc=
Subject key identifier:   BC:8B:1D:34:1A:29:A1:00:7A:C8:13:90:B8:8C:97:D2:7D:9D:DB:DC
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A74B5DBE877E9B5E77A4BF1B0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        2620:101:200a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:db:e8:77:e9:b5:e7:7a:4b:f1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=337602fb-eb70-4850-bfa0-d2082dcfe923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:60:18:23:d2:d0:87:76:55:da:13:fa:91:
                    26:23:f8:50:df:44:15:60:14:40:6c:49:08:70:ba:
                    80:14:d4:8d:da:83:1e:9d:9d:7a:8e:33:55:97:63:
                    bd:bd:0f:6a:c2:4f:b4:04:c6:ba:68:b8:64:3c:69:
                    e0:0d:0b:e3:65:1b:a7:43:4a:d6:43:f4:ed:2f:2e:
                    db:8f:f7:67:87:d7:c3:02:69:bb:65:9c:1b:8c:a6:
                    03:05:92:cc:09:b1:e5:56:62:33:22:6d:35:f4:e6:
                    5e:64:73:54:8d:e0:0b:85:7f:b9:ec:da:4f:87:5b:
                    c5:4a:4e:30:a1:1b:d0:ae:b0:a6:45:f9:40:1f:b0:
                    b3:22:e5:1f:b0:5a:a0:5c:fd:42:71:5c:92:aa:17:
                    4d:c8:1b:a1:90:bc:df:d9:4f:32:d3:b3:d6:2e:82:
                    d0:1b:a4:c2:50:4e:37:bc:16:3c:62:a1:0e:d4:ad:
                    43:21:2b:d7:ca:e9:b8:46:48:6a:b3:c8:f3:01:cd:
                    46:c8:9a:7a:01:16:ca:17:d2:68:f6:40:29:a7:c5:
                    41:c7:a3:6d:ca:73:41:88:8b:08:91:ae:0c:37:3d:
                    54:8a:1f:94:22:4f:5f:7f:73:8a:9d:52:7d:4b:fa:
                    0b:ea:4b:a9:7e:c5:3d:bc:a9:12:1e:fc:25:85:b5:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:1D:34:1A:29:A1:00:7A:C8:13:90:B8:8C:97:D2:7D:9D:DB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:45:fa:3f:6f:9c:4f:ed:3b:6b:7a:00:fb:43:ce:c2:6d:
         d6:c2:02:88:fd:f2:92:37:be:e1:b4:a6:82:78:ad:26:51:b2:
         49:55:6a:54:81:4d:8d:d6:26:7d:f4:b0:5f:fa:76:45:44:d4:
         ff:62:14:b8:6d:ea:7f:45:15:4b:c9:0d:c4:0b:20:79:af:2f:
         47:55:a4:f8:b5:35:91:dc:04:2b:de:f0:e4:b2:54:74:6a:3d:
         4d:30:89:95:4e:a6:10:6a:a6:76:4b:53:49:bb:1b:70:40:d2:
         d6:58:26:34:03:d6:ea:44:03:dd:59:59:5e:0d:f9:b6:01:71:
         ad:b9:fa:37:fd:07:91:8c:4c:1e:ad:07:63:83:61:05:da:d9:
         16:07:bc:42:6d:46:65:bf:de:7f:89:39:4f:4a:d2:8c:fb:4c:
         73:a8:aa:f0:6e:f4:8d:73:58:cd:fb:d0:25:7a:38:c1:6e:de:
         e5:a5:5e:24:e3:ad:30:3d:fb:a1:42:18:46:7a:01:ce:f2:b7:
         7a:79:7a:65:12:ae:9c:2c:1f:0e:b5:9c:d4:54:95:d6:12:f8:
         ea:60:b8:5a:be:17:b3:6d:d1:8a:3a:3b:5a:d5:c8:35:58:4b:
         d1:a2:ce:99:0a:b5:4f:8e:25:68:ec:af:be:f6:77:9f:4e:4b:
         8d:fb:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:43:31 2025 by rpki-client