Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa
File:                     1806c907-f51b-3ddd-9700-176341f778ee.roa (raw, json)
Hash identifier:          X5Yutgybhb8xbsvzMClNW5kWJaxepu0WJpKRrWKEKUc=
Subject key identifier:   9D:E7:E0:70:38:43:0D:FF:A5:A1:79:46:BF:44:5C:CC:9E:9D:4C:9D
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F4328584B40819D99A6F6A1078C427740
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     62597
IP address blocks:        2620:4d:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:9d:99:a6:f6:a1:07:8c:42:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=b665303d-3612-4b93-8015-4fb1b3d1faa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:be:09:6b:2b:56:3c:7d:60:a2:77:cf:ed:
                    d7:fe:6c:09:c0:be:18:30:04:11:5b:75:7a:19:3a:
                    2d:12:8e:68:cc:03:06:de:86:3a:e8:53:32:e5:b1:
                    2e:c8:31:66:bb:d0:d0:53:fe:56:fa:31:56:51:b7:
                    27:fc:2c:ce:da:f7:d3:7f:83:11:fe:93:63:e7:e1:
                    b5:04:b9:f3:a4:77:8c:a1:97:31:8c:38:6f:94:e0:
                    6f:d4:74:86:0b:d7:72:26:1e:61:de:a5:f8:99:f9:
                    55:8d:00:50:d1:5e:8a:58:a4:bb:79:f5:db:24:df:
                    1b:b1:f9:bb:f5:2d:51:f8:47:31:3c:55:95:08:c8:
                    2f:e8:99:90:62:ba:ad:0e:8e:c6:43:d5:08:d4:cc:
                    de:e5:a1:4a:4e:a9:10:08:f2:e3:de:1c:d0:41:7b:
                    54:50:b6:89:a6:56:39:59:e0:06:60:b5:a0:75:97:
                    a7:8d:0a:66:90:c0:89:58:8e:83:26:18:0b:ed:ba:
                    63:7d:21:db:f3:52:2a:5b:56:b6:b1:24:45:0d:a4:
                    d8:ef:79:8b:e0:e0:68:d2:2c:02:a6:45:dd:3f:df:
                    bd:be:43:cd:02:27:ff:04:e5:c3:63:ae:6a:10:7f:
                    90:6b:61:6c:04:65:e9:70:de:bd:e1:a3:08:f7:21:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:E0:70:38:43:0D:FF:A5:A1:79:46:BF:44:5C:CC:9E:9D:4C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:02:df:bf:cd:85:6e:17:d6:66:1b:11:a6:91:43:c0:bd:9a:
         25:78:6a:da:1f:59:f8:a7:ac:75:a8:fc:ef:8d:07:af:f2:1b:
         5c:bb:00:31:4d:e1:f8:4f:92:f2:49:26:97:25:e7:c3:00:01:
         f8:22:4a:ae:c2:3b:24:28:90:1f:86:5d:71:f3:ab:46:ea:fe:
         a3:0d:d7:59:3f:76:5b:e3:62:65:a3:3e:25:be:bd:99:9b:45:
         92:08:fc:1e:a2:11:47:03:c1:14:ae:c3:ee:86:b6:cb:1f:1b:
         6d:37:af:01:c7:9a:4e:2a:f1:45:d6:d1:ff:36:e2:6f:c5:b2:
         00:a3:1f:83:d3:c8:06:35:bd:47:ed:e3:1a:34:f8:48:7c:07:
         fe:4a:fb:a4:65:79:92:1c:d1:14:eb:03:12:97:c2:cb:59:ed:
         1d:df:be:21:cd:47:a7:9a:79:28:20:47:b9:f0:c5:e0:16:4a:
         13:bd:46:8b:42:ca:e6:2a:cd:0b:8f:de:09:cb:ea:d8:b1:d5:
         97:06:d6:c1:d9:4f:41:28:3a:52:4b:1f:96:aa:9f:fe:df:ac:
         b7:a0:e5:95:3b:d5:9e:88:e9:48:1a:87:6a:11:70:2e:ca:36:
         cb:71:a3:16:c4:18:5a:43:3c:b8:4f:97:49:25:31:0a:0e:df:
         a4:23:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:01 2025 by rpki-client