Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
File:                     35c6001a-b4fa-378a-ac14-5506718c4e2b.roa (raw, json)
Hash identifier:          uof0rHTkbEU4Pqj4CWK88H2q70x6i9qBdHGJYR6ankg=
Subject key identifier:   59:7C:9B:14:A0:0B:D3:53:15:BB:D3:82:D8:57:E9:10:47:97:40:0B
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584ACB40E17A0A9B2B6E7446C600
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2620:121:5080::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e1:7a:0a:9b:2b:6e:74:46:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=1945f506-107d-4c2e-a4b3-318d0fb1e057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:a9:d1:12:c1:f2:d7:2c:23:11:9e:0b:0f:
                    47:34:8b:cb:25:78:b7:5f:93:f0:4f:68:ac:9b:d1:
                    de:8a:04:31:3b:98:2e:39:f8:5b:f1:69:f6:2a:4b:
                    f4:56:4d:bc:da:a0:65:d1:9d:64:f3:db:14:ce:74:
                    a0:92:44:e6:0e:c5:7c:d9:21:0e:b2:4b:de:28:b5:
                    7e:fd:d6:17:0f:f4:63:2d:58:3e:11:7f:06:83:81:
                    2b:d2:82:99:a5:d2:1e:0a:e0:69:ec:06:4f:0a:74:
                    ce:c5:f1:d3:7a:11:29:ff:a1:3d:5d:f6:6a:0c:11:
                    2b:a2:97:7a:da:fa:24:32:d4:fa:9d:92:ad:39:e1:
                    83:44:81:28:2d:2e:ed:fd:cb:d9:c7:5f:d5:84:1a:
                    94:2d:fe:6d:01:62:a2:55:c9:87:38:77:df:8e:3e:
                    9b:f3:68:55:18:9b:a9:f7:25:83:50:85:d3:08:92:
                    3d:61:df:ec:56:18:f4:1b:fd:af:52:bf:e2:0d:59:
                    ee:1a:66:d8:fb:93:3a:94:73:3a:52:0b:c0:a6:64:
                    2a:bb:89:d2:8a:63:e6:fa:05:05:ce:b2:cb:98:91:
                    84:e9:7c:e4:40:0e:6f:cd:28:b8:3d:07:9e:9a:7a:
                    5e:f3:48:48:b7:bc:59:46:3f:fe:b9:e6:be:e1:41:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:9B:14:A0:0B:D3:53:15:BB:D3:82:D8:57:E9:10:47:97:40:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5080::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:93:97:f5:88:1c:67:1a:ef:31:ce:f7:6d:06:e6:87:1c:
         79:e7:79:14:4c:db:bc:fa:1f:7b:17:b5:33:21:18:fe:4c:59:
         6f:ec:ab:03:d6:5e:8b:3b:6e:bf:eb:34:5e:b0:1a:ab:9d:28:
         d6:0e:e0:a6:e7:c8:16:46:f0:60:29:71:a7:0d:e8:7b:af:c7:
         fd:83:f9:96:78:4f:2f:ba:15:be:f8:b8:ae:be:7d:6b:3e:de:
         4a:12:d3:47:4f:bb:ed:e4:56:e5:56:5f:ad:39:74:26:05:4f:
         e1:ac:b2:a8:48:c9:e3:76:48:26:64:14:50:08:e6:4c:fb:7f:
         33:3f:c1:f0:22:77:67:d9:4b:68:cd:e5:fd:6c:9a:23:05:00:
         16:ae:21:19:9d:b4:f0:1e:6e:24:65:5f:e5:32:91:07:15:10:
         db:92:ef:96:5a:89:1b:d7:22:de:09:73:b4:54:8d:73:41:29:
         50:1c:c9:16:9b:49:3f:28:ee:2e:fe:51:1a:3f:81:3c:f0:23:
         0e:ac:57:f3:cc:ef:90:c2:b9:ba:94:0e:e9:c9:01:e1:1a:cc:
         3f:b7:87:01:a1:bd:57:ba:09:1d:21:29:9a:4f:db:64:d4:bd:
         51:2e:fb:f1:35:15:76:f5:31:df:fa:f8:73:49:e2:11:29:6a:
         3b:cc:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:13:26 2025 by rpki-client