Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
File:                     47d03f04-4fc2-3a97-baf2-0020fbbff431.roa (raw, json)
Hash identifier:          sucXtF2oSI6PYKqsz4j7N0e05v3qGxxI9MYac5JWZ5U=
Subject key identifier:   42:E5:DF:D6:F0:02:22:6F:2A:E0:D4:36:1A:86:0A:86:4D:1E:85:B2
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584A374AC70807C396715BA57300
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        2620:122:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c7:08:07:c3:96:71:5b:a5:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=8ab63233-2e64-4d9f-b685-08e5aea19cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:25:2a:70:44:bc:7b:c1:2b:77:b8:f7:e6:
                    be:e6:60:36:a1:11:9a:dc:58:dc:b6:6f:a8:c7:df:
                    a1:7d:c8:54:58:66:64:ee:d5:a4:6e:a3:f7:fa:0f:
                    2e:8e:73:81:a6:56:71:70:2b:cb:48:f7:ea:de:eb:
                    e5:0a:bf:12:e8:61:79:b2:96:3a:9b:3e:e5:40:30:
                    ae:44:f1:aa:2e:7f:83:6c:cb:dd:e7:13:ed:2f:03:
                    a0:cb:94:35:73:67:1e:3c:d0:f0:6a:f0:40:f2:03:
                    ad:7f:8f:5d:93:23:86:a5:6a:6f:f7:52:c7:28:5b:
                    ce:ae:9a:8d:f0:00:bc:71:dd:c7:32:4b:b5:53:e5:
                    3b:58:07:d8:a8:dc:33:87:fe:54:e8:20:f7:6a:2d:
                    9b:9d:81:f6:be:a3:1a:01:6a:fe:e5:9c:42:03:b6:
                    d1:84:9d:35:fe:f1:f0:5c:ce:ad:cc:c9:0a:e0:ed:
                    64:dc:b5:6a:d4:17:cc:6f:b9:81:22:4d:96:a5:35:
                    6f:7b:80:25:90:fd:ec:11:f5:12:28:11:a1:40:cd:
                    82:d2:6d:1d:80:de:b3:66:df:02:96:86:98:51:76:
                    55:cf:06:f8:f2:8f:14:4a:ca:02:55:54:82:53:e5:
                    cd:cd:3d:f2:33:c0:5e:a4:94:cc:22:9a:d7:24:92:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:DF:D6:F0:02:22:6F:2A:E0:D4:36:1A:86:0A:86:4D:1E:85:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:26:b0:93:0f:d6:1e:a7:d8:c9:85:fc:39:97:94:c2:6c:
         20:75:d0:8c:44:b4:96:a4:90:ed:2c:ce:89:5c:91:fa:f1:b4:
         7a:14:75:dc:c6:bc:56:0b:85:6b:12:cc:47:aa:9d:2c:37:49:
         d8:7c:b8:68:5b:82:ff:60:c1:83:57:0b:6a:83:5c:8a:4c:5b:
         16:e5:dc:c0:c3:44:d0:e6:a6:f0:63:34:3a:28:47:d5:0e:01:
         e8:0e:43:3e:3d:c8:6b:2c:19:4f:4f:17:de:4f:cf:62:7c:cf:
         9a:6d:d0:a5:74:8a:ce:48:3f:13:88:21:91:d0:7a:51:96:d9:
         8e:db:a7:b0:8c:13:29:18:44:e0:30:f6:bd:88:66:73:0b:e4:
         ef:c1:0c:50:85:d7:29:97:b0:c5:d0:e3:9d:a6:9e:a7:ef:83:
         f7:a1:dd:0b:cc:35:f2:13:1b:c1:00:28:5d:d8:de:52:75:d3:
         39:d8:53:c9:1b:51:1d:2e:1e:8a:e3:cc:16:8b:b6:55:d5:95:
         be:42:ad:56:9e:4d:9d:dd:b2:01:33:06:f7:c4:cd:10:e8:90:
         2b:90:d1:fa:2f:9b:cd:9e:13:38:e8:94:9b:fc:bf:fd:e2:08:
         a3:03:08:57:13:f6:4f:e6:8c:0f:96:c6:96:fc:69:b8:a5:2e:
         63:45:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:14 2025 by rpki-client