Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa
File:                     e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa (raw, json)
Hash identifier:          RR6flKfcXNza3cGiIgtzIUDp24xvnlvti3BiYYXHLRU=
Subject key identifier:   BE:C0:0E:AD:6D:1A:80:9D:F3:26:CE:A0:7E:03:48:94:BD:08:1A:6C
Certificate issuer:       /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial:       010D0C9F4328584ACE0BA63377DA0FFD1F506240
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     3573
IP address blocks:        2610:b0:41d8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a6:33:77:da:0f:fd:1f:50:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=d2b38355-14de-4566-962b-1e17177d928d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:1b:4d:1a:52:dd:21:05:bf:c1:18:c8:8d:
                    77:34:3a:02:90:ca:89:bc:12:49:3d:1b:cf:a1:1e:
                    81:4c:1f:48:74:62:ee:f8:cc:58:ed:00:50:25:ce:
                    99:5a:ae:a2:67:48:43:9f:24:26:f5:0d:b4:0e:12:
                    9b:97:95:5d:b5:f7:b3:5c:b4:25:a2:e1:24:e5:8f:
                    88:a6:38:fa:0b:d9:47:43:ab:12:98:cb:75:1b:03:
                    c2:92:39:95:d6:18:1d:1d:68:fd:b7:7f:84:77:5d:
                    20:f0:a4:c8:c3:0f:2e:ea:b1:58:75:1e:ac:96:42:
                    d0:2d:9a:2e:0c:ba:02:d9:51:54:a3:87:d4:55:15:
                    d4:c7:39:ef:22:53:04:79:42:8b:14:bd:1d:b0:4a:
                    a8:14:1c:95:3a:51:af:40:fa:ea:77:f6:02:5d:01:
                    9e:ae:b7:eb:4c:82:9e:36:2c:bb:44:8d:06:82:61:
                    10:e9:37:59:8c:af:88:50:60:8d:d7:55:48:db:54:
                    df:8e:8f:01:1c:16:65:5c:52:87:2d:2b:5a:f1:08:
                    c4:e3:5c:2e:79:5c:a4:3d:98:5e:27:80:21:e8:78:
                    5a:e2:25:41:ff:91:45:2c:af:b3:0d:f2:c9:90:fd:
                    6e:09:15:3a:b7:98:c3:96:1e:69:70:70:f7:48:15:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:0E:AD:6D:1A:80:9D:F3:26:CE:A0:7E:03:48:94:BD:08:1A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl

            X509v3 Authority Key Identifier:
                keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:b0:41d8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:50:90:a1:07:5d:86:b7:9f:60:57:71:47:1c:f3:cc:19:
         85:67:eb:f6:a1:9c:92:f1:6c:96:e4:3f:49:a5:9d:05:e3:dc:
         3c:f8:8c:08:60:94:1b:98:57:55:2e:04:6b:16:95:cb:b4:b1:
         f3:f4:ed:97:e6:43:7e:6e:b0:1a:80:a9:14:e3:f1:ce:77:35:
         b5:40:0a:a9:cb:eb:5d:a4:43:72:c8:45:eb:2a:88:45:62:90:
         b5:eb:21:c2:86:e6:57:29:f0:e0:66:6d:94:84:81:9f:9b:26:
         9e:aa:dc:bd:03:ec:3d:12:e7:7a:cc:2d:59:0d:31:23:2a:63:
         f7:4f:29:5b:91:6a:70:9f:4a:65:7e:d1:a9:9e:45:97:71:13:
         a6:87:d3:1a:04:20:f2:0b:49:04:cc:63:b2:34:ea:04:9b:03:
         8d:7f:fc:62:92:d2:19:03:fb:69:74:8e:a0:5a:ad:fa:a0:a6:
         9b:fe:b2:fa:61:2b:85:4d:95:a1:c2:c8:79:bd:bb:ff:8e:a0:
         e3:0f:d9:8d:5a:6a:d2:ef:15:26:26:58:56:6d:42:d6:7a:c4:
         06:2a:0b:67:37:ca:be:75:b8:e7:04:6e:15:71:d5:a4:c4:5a:
         59:fd:3b:e4:b1:5b:16:66:1f:0b:94:01:f6:34:2f:66:1c:da:
         c7:9b:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:55:37 2025 by rpki-client