Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa
File:                     e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa (raw, json)
Hash identifier:          XN223bS8N3gH98zxer7yg5Q6Wm+Noth7Ao7Oun9ZeZY=
Subject key identifier:   BD:D7:7C:77:4E:C1:F4:39:DD:5D:1C:29:C2:F8:7E:0E:C0:AE:E7:CC
Certificate issuer:       /CN=c8252214-88a3-4807-bbe2-b344c3be7f19
Certificate serial:       010D0C9F4328584AECC12713D9A9D70736748A00
Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     25639
IP address blocks:        2620:78:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:27:13:d9:a9:d7:07:36:74:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f2310e8a-ef34-4411-983d-248de80d9350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:d6:da:99:a4:7f:cb:f0:e6:b4:83:66:49:
                    89:ff:a1:a0:f3:39:7e:f7:79:87:76:54:7c:7e:14:
                    f1:2a:6d:da:1e:ba:6f:c0:d2:fc:fe:17:57:3b:81:
                    70:74:91:4c:98:0e:ae:f3:23:25:71:39:72:6f:42:
                    17:2d:0d:c2:ca:38:53:48:89:43:07:2b:1a:9a:41:
                    d6:50:2f:6e:09:f6:13:15:55:56:70:a3:af:1e:f2:
                    7d:b3:07:4b:a0:3a:06:1d:9a:aa:84:dc:50:fe:29:
                    e8:27:a5:64:ec:c9:4e:23:15:c1:22:c2:5e:f2:58:
                    89:c0:83:4c:7d:3a:7e:8f:2e:0e:85:27:2d:12:39:
                    fc:75:ec:0a:5e:f7:a4:2e:53:62:b8:c2:b5:ef:5b:
                    92:be:e3:cb:27:82:cb:e3:07:e1:97:90:c1:0d:e0:
                    a2:e9:43:68:b2:7a:08:ac:ba:82:5a:4e:66:c2:ee:
                    ad:39:32:d7:94:c1:1a:10:14:cc:3e:de:c6:d5:aa:
                    1d:cf:10:cf:1e:5a:31:83:b7:aa:f1:24:69:5f:90:
                    30:6d:2f:ae:32:18:34:be:16:30:3d:f1:d8:89:1f:
                    61:91:bf:14:36:01:df:8b:6f:f4:eb:3b:3b:67:ef:
                    a2:5d:74:13:d4:1d:31:f7:a6:e8:a5:fb:50:08:79:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:7C:77:4E:C1:F4:39:DD:5D:1C:29:C2:F8:7E:0E:C0:AE:E7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl

            X509v3 Authority Key Identifier:
                keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:78:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:16:f7:f2:ee:f3:a2:77:06:b9:75:3b:74:5e:f4:af:2b:b4:
         c7:fe:2b:5e:f3:c5:22:01:87:e5:5e:3b:e0:53:8c:e4:f9:f9:
         f8:ba:2a:ea:ef:9c:c3:1a:bf:59:35:23:96:8b:7e:b6:c7:d9:
         62:1a:f2:a7:46:17:e5:d9:e1:52:8f:96:d5:24:c0:a8:a1:ae:
         1b:2a:62:4e:a6:ff:a0:70:f9:33:0a:26:5e:34:10:09:d3:75:
         1c:70:0d:37:2f:ef:13:9b:b2:2b:c1:1a:8d:41:63:6a:0e:bc:
         0a:9e:14:30:f1:9e:6f:25:9c:62:90:8b:bc:f0:3f:9e:fd:c7:
         5d:de:ec:ab:3c:3f:a4:74:25:30:08:35:94:bf:7f:bc:37:57:
         5e:4d:79:7e:4b:14:cb:cb:07:d9:52:88:0b:7d:45:2e:b0:7e:
         5b:4d:4c:ac:59:f0:81:29:02:6f:3c:12:9a:c1:a9:ee:65:46:
         98:1d:78:95:b8:b7:4a:a3:43:98:db:d8:71:26:ba:9a:3d:c7:
         71:85:da:5a:a0:81:b0:fe:97:9f:65:dd:c4:8d:12:2e:58:5b:
         e3:ff:6b:dc:0a:aa:64:25:26:63:57:c9:4f:ed:44:ad:fa:f3:
         d6:98:7e:81:9e:9f:9a:fe:a6:3c:22:1f:74:9e:48:28:43:0c:
         50:b9:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:04:55 2025 by rpki-client