Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa
File:                     6628d323-03bb-31cf-906c-a0bced4bc384.roa (raw, json)
Hash identifier:          Y6p4V0gTgV/1Fj5/FCP2TwmGxQ+q4aFFqKU0TLK+D8g=
Subject key identifier:   7E:3D:3F:87:EC:0E:33:8C:ED:D1:DE:80:E1:7F:8E:04:CA:A3:FC:8F
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584AD32E49E045F46C63F5D76400
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa
Signing time:             Mon 11 Aug 2025 21:09:35 +0000
ROA not before:           Mon 11 Aug 2025 21:09:35 +0000
ROA not after:            Sun 09 Nov 2025 22:09:35 +0000
asID:                     8103
IP address blocks:        2001:520:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:2e:49:e0:45:f4:6c:63:f5:d7:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Aug 11 21:09:35 2025 GMT
            Not After : Nov  9 22:09:35 2025 GMT
        Subject: CN=13e29885-c9a5-4e56-a6b1-c72e773510f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:b9:60:ec:61:b8:f2:79:a9:8f:c1:a1:93:
                    44:5b:26:52:d4:a4:b1:19:43:09:2a:fe:a6:a6:1b:
                    31:29:96:48:13:d1:a1:5b:1e:70:ff:12:b0:de:21:
                    d5:53:d0:a2:87:2d:45:20:76:0c:e4:d5:e4:d3:d8:
                    fd:2e:b7:c8:97:bd:9b:75:d1:61:6f:26:07:e9:0e:
                    67:c4:b6:a2:15:3e:d7:54:2f:eb:97:c3:33:66:ab:
                    e3:7b:36:67:7e:c8:55:dd:80:33:3b:ac:49:58:2c:
                    fd:b9:87:b8:aa:00:78:40:40:58:16:75:fe:04:74:
                    4e:56:a5:2a:ba:75:2c:d1:38:2e:e8:6d:b7:5d:44:
                    8b:7e:be:76:da:c8:f5:47:1a:e2:0d:54:c6:fd:b2:
                    3c:44:ab:9e:86:56:7f:99:1b:0a:d0:76:d3:1a:62:
                    97:81:65:bd:fd:33:cd:37:13:d8:df:39:57:2c:ad:
                    60:3f:97:ef:4d:93:40:d2:29:83:3e:91:a7:c8:6f:
                    70:42:55:35:17:d0:2a:81:c7:ce:cc:a8:d1:c4:2f:
                    17:61:3e:9f:59:07:9e:6d:18:cd:de:85:82:3c:d7:
                    ec:a9:fd:eb:f7:ca:2c:84:82:a9:21:ad:28:32:57:
                    39:37:70:5d:3a:31:e0:fd:b0:16:fa:4c:22:de:15:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:3F:87:EC:0E:33:8C:ED:D1:DE:80:E1:7F:8E:04:CA:A3:FC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/6628d323-03bb-31cf-906c-a0bced4bc384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:d5:ca:13:1a:c2:0f:57:69:80:86:20:06:85:00:0c:12:
         98:29:b1:e7:eb:e3:6c:13:76:06:98:44:13:3e:e1:f4:3c:6c:
         e2:55:b7:29:d4:f5:e9:6f:ca:3c:e4:79:aa:72:90:79:18:ac:
         4a:c1:96:33:57:70:aa:e1:48:d5:cd:28:75:b9:e4:db:1d:51:
         a5:a9:8a:79:23:23:99:2c:d4:a4:eb:52:26:f9:19:fc:97:86:
         86:06:91:c3:fd:83:e8:81:e6:5a:e8:2a:32:63:0a:29:c1:97:
         bb:e4:3f:0c:98:b9:8e:dd:1b:dc:40:a6:9a:80:1a:a6:04:ea:
         65:39:12:18:38:c4:19:fb:94:1b:cc:74:43:d8:e7:2d:94:ed:
         d9:9f:1b:6e:e6:5e:b6:22:35:68:4d:39:6a:22:7f:e5:86:2a:
         e8:49:a7:61:24:3c:d1:c1:9e:49:44:11:98:a8:a9:34:38:3d:
         35:6c:80:34:46:8c:ac:b7:17:2c:7c:26:e9:b5:48:0d:d8:b8:
         f2:21:a6:8b:5d:a6:bb:26:e8:2e:72:35:de:83:57:49:b6:dd:
         e7:d9:dd:59:f3:a3:d0:6d:fc:7b:bc:ce:70:5b:63:a2:80:e4:
         bd:32:db:76:d1:ec:8f:a5:36:5f:e0:5c:d1:7e:6c:c7:67:38:
         21:93:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:30:34 2025 by rpki-client