Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/6cd64635-efeb-3b5d-97d0-54dc898e109a.roa
File:                     6cd64635-efeb-3b5d-97d0-54dc898e109a.roa (raw, json)
Hash identifier:          ggKA3xs+fAzNo01qmtctaafyJScjPC5b89V6XxNJ1wc=
Subject key identifier:   A4:32:D8:0E:59:8A:7C:30:EB:6B:FF:99:C3:CA:9C:84:33:DE:9D:51
Certificate issuer:       /CN=ea312878-f1ba-42e7-a1ba-81816caf8ac5
Certificate serial:       010D0C9F4328584B28C6E0CCE9E799FC939ADCC0
Authority key identifier: 03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/6cd64635-efeb-3b5d-97d0-54dc898e109a.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     54617
IP address blocks:        2620:1b:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e0:cc:e9:e7:99:fc:93:9a:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea312878-f1ba-42e7-a1ba-81816caf8ac5
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=30d4cbbe-219d-4b0b-a818-c56deece7993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:a5:ae:30:5e:fd:88:c9:62:75:68:22:ca:
                    14:72:9d:62:f6:7f:a6:3a:ea:8b:3f:43:06:0a:bc:
                    2b:e4:9d:e1:58:8a:bd:5f:c0:be:78:c1:c1:38:93:
                    16:33:38:34:fd:97:79:f2:7a:1b:4e:7a:25:1a:4e:
                    60:fd:85:19:38:14:42:85:79:2e:d0:8d:df:4e:3e:
                    ad:2d:7d:10:d1:98:00:72:fc:92:e8:f2:0b:83:ad:
                    95:e8:0d:08:c1:e0:01:0b:ed:bf:30:b5:28:cc:1d:
                    ba:ee:aa:cc:12:3a:83:c4:44:4d:09:37:d9:a9:1d:
                    ca:fb:40:3e:4b:09:b4:f3:0a:fb:ad:7b:53:04:fa:
                    50:cb:4e:78:59:a8:de:3b:dd:db:19:36:f3:89:81:
                    5f:a8:50:89:d9:bc:6b:b2:60:74:70:a1:7a:57:e1:
                    57:40:f8:12:06:14:29:b5:9a:ac:79:06:12:09:28:
                    c3:c6:26:20:4b:49:2c:62:79:41:07:fb:95:8a:3e:
                    a2:f3:55:e5:a9:06:b6:7d:0f:8b:ca:15:86:44:58:
                    d2:e2:b1:7f:bf:5c:ce:40:4e:68:08:51:a4:b1:45:
                    78:06:2c:79:f8:0e:9c:07:e9:0a:46:fe:d8:04:5e:
                    1b:19:8a:78:7d:89:01:74:86:e2:9f:9e:92:65:c1:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:32:D8:0E:59:8A:7C:30:EB:6B:FF:99:C3:CA:9C:84:33:DE:9D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/6cd64635-efeb-3b5d-97d0-54dc898e109a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.crl

            X509v3 Authority Key Identifier:
                keyid:03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:6a:ac:26:bc:44:bb:10:f2:fd:2d:d5:92:45:59:aa:f5:
         42:a6:e0:af:77:12:9b:36:a3:c5:f8:f6:65:0b:35:5a:e9:9b:
         f6:b5:67:02:d3:c1:74:93:3e:01:fe:20:e3:70:4f:eb:5e:d4:
         4c:48:61:b6:91:62:1e:34:b6:f1:ef:e7:e9:86:14:ef:a0:39:
         7c:35:c0:27:f2:f5:ff:d4:49:05:50:7a:c3:c0:8c:46:55:f4:
         eb:fb:ba:ec:d0:38:88:5d:74:bb:07:60:7e:0f:04:c9:87:f5:
         4d:d9:21:a2:14:c8:42:37:71:00:07:1d:ce:c9:36:6b:05:44:
         28:de:1c:ed:22:f3:90:b6:c5:6f:e8:7f:bf:39:c4:1b:c6:e4:
         76:e0:2f:af:5f:c1:7c:5c:9e:39:e3:c1:fa:65:f8:c6:b9:b5:
         9c:56:6e:e0:21:73:03:74:06:8e:13:5c:84:cd:b0:e9:0b:b3:
         fd:07:b5:55:17:7a:0b:81:39:c2:b6:85:bd:b7:8e:37:38:8d:
         14:90:2b:c8:f7:2c:aa:0c:cc:56:95:58:15:62:97:1f:e4:4f:
         08:f0:00:c8:f0:ea:e0:44:8b:c3:40:2f:3d:7d:57:d2:7a:d8:
         97:d9:23:a0:64:65:d9:11:b6:4c:04:9c:da:11:3b:e1:ef:4b:
         8a:a4:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:43 2025 by rpki-client