Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
File:                     6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa (raw, json)
Hash identifier:          t2h+AfSs82lf8fTksTHrarGbW+Yqi/gB3zF3BxyZtRI=
Subject key identifier:   5F:E3:2C:1B:70:5B:C5:4B:52:DD:A1:09:FB:9A:F3:45:8F:C3:7B:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA669C33D0C351DBDC647C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     36627
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:69:c3:3d:0c:35:1d:bd:c6:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=b8475646-542b-4a0c-8766-b346ba48b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:99:ea:94:85:39:30:38:c2:5f:e3:7b:7f:
                    d1:dc:b8:a6:a6:a8:e8:39:89:32:6f:74:1d:ed:cf:
                    3b:a3:7f:50:a8:d6:bb:e7:98:08:33:fb:3c:84:e0:
                    48:c2:00:a3:80:73:b3:a3:d2:f8:e4:84:c8:4e:df:
                    19:ca:69:b0:cb:b9:28:25:50:c5:11:3e:64:22:d6:
                    cd:c4:37:b9:c7:a8:f1:97:29:68:df:f3:22:a6:5b:
                    e1:6b:c3:9a:37:91:40:90:43:86:6d:6f:8d:79:6f:
                    7e:53:3b:2a:52:53:a6:c9:c0:c9:6a:a9:7e:ee:cc:
                    fc:9c:89:ab:c0:65:5a:ee:df:9c:93:27:ca:2e:63:
                    f5:c9:94:3e:cd:39:1b:af:44:41:aa:7a:75:dc:79:
                    07:1f:d1:f1:b5:a4:3a:d1:82:ea:0e:f2:17:57:61:
                    c7:c1:03:1e:e4:9d:10:ce:43:b6:f0:9f:7d:65:9e:
                    ea:51:e7:c9:d4:de:5f:07:0a:f1:c1:c0:54:65:4a:
                    9a:ec:6c:b1:32:62:72:40:9d:e5:62:28:93:ed:d3:
                    de:0d:a4:9f:84:23:08:76:9f:40:6e:af:d2:a7:94:
                    b6:0f:74:81:ae:13:22:19:4c:5e:e8:69:b0:74:1f:
                    07:f4:8f:6f:d1:20:c5:b9:e8:58:7f:a2:e9:1f:73:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:2C:1B:70:5B:C5:4B:52:DD:A1:09:FB:9A:F3:45:8F:C3:7B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:af:6f:7d:a3:43:fb:d7:2f:e3:1e:31:cd:5a:6a:b0:d1:f6:
         44:70:70:bf:9e:df:f7:a8:c1:3b:45:de:db:e8:32:72:29:01:
         1a:87:ca:00:bf:ea:1e:5b:e1:b5:d1:40:56:01:9f:9a:d2:cf:
         a7:08:9d:0a:26:2d:31:f6:3d:e6:9a:d5:9c:f1:ea:3b:e4:e1:
         cc:77:2b:29:a1:6a:39:a4:82:c1:e2:dc:a0:76:d6:58:18:62:
         c1:70:c8:7c:d3:7b:d3:04:d1:66:f0:a2:e5:38:d9:d9:c7:66:
         8e:37:94:18:c7:68:51:90:98:05:5d:9d:3d:28:eb:25:a7:24:
         a7:cd:e0:93:e4:5e:3a:87:ad:6d:ac:14:e2:fd:a8:84:c9:fd:
         f1:96:0a:1a:a9:5c:08:88:a8:b1:6e:5f:f9:df:d4:21:42:89:
         74:10:5a:7f:f3:a2:4f:5b:b3:71:8f:a0:0a:bc:1e:6d:03:1d:
         3d:e6:ce:80:6e:f0:43:8e:29:eb:6e:9a:23:63:7a:fb:1a:80:
         27:82:5a:ca:ad:f1:06:35:ac:c7:53:be:29:80:5e:6b:99:d5:
         b4:89:8f:45:cc:9c:67:c0:40:a1:2e:19:e8:a3:66:9c:d6:45:
         6d:d6:c8:48:6a:e4:f5:b2:49:2e:07:01:94:cc:11:83:94:24:
         25:b9:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:48 2025 by rpki-client