Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa
File:                     1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa (raw, json)
Hash identifier:          Lg85xTKVnDsAqYLscQh2YnpwhWbdGgRTG8eM/kuJkIU=
Subject key identifier:   89:33:4F:58:DE:20:EB:5E:F0:62:A8:06:75:08:07:F3:23:3E:79:CB
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584B5141C00BC7B635214C014980
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     32771
IP address blocks:        2620:111:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c0:0b:c7:b6:35:21:4c:01:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=19fb4e55-4b66-4e61-b19e-702f5979bdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:1c:e4:45:48:05:ca:f9:be:1c:2b:f9:15:
                    db:a7:76:08:e8:3e:95:5b:b1:db:4a:cc:c9:22:a2:
                    09:94:7a:51:f7:d6:04:76:2c:59:57:9a:01:80:fa:
                    c5:a2:4d:07:15:c0:77:4c:44:fd:49:06:0c:12:48:
                    9c:33:1e:94:bf:eb:ea:49:6c:26:f7:7e:92:c2:d1:
                    72:17:d5:2d:c8:4f:43:9d:9b:fc:06:9f:9e:7d:08:
                    74:46:aa:56:29:75:89:95:37:dd:49:58:cf:0e:9e:
                    aa:13:3a:39:d5:3b:e6:db:62:81:90:2b:0b:de:e3:
                    58:f3:40:8b:c3:6b:53:95:c8:12:8b:36:de:c4:37:
                    9b:9b:27:b6:a1:9a:e6:6c:ed:77:fa:51:fb:79:17:
                    d2:de:85:0d:cb:f8:c2:ed:60:53:00:c1:76:79:41:
                    e2:cc:17:ef:b4:db:8c:48:aa:e9:ad:4c:41:bb:fd:
                    20:bb:a0:eb:14:c4:18:5c:0a:c5:ce:32:b1:0f:2a:
                    4e:f2:6f:6f:bd:28:84:6f:83:6b:c7:af:63:64:fe:
                    e8:d0:97:b2:05:95:91:e1:70:4e:a9:5e:c7:ad:ed:
                    e1:bb:6d:ed:03:6a:78:af:7b:2d:c8:79:a8:c3:51:
                    60:35:7a:f8:f1:3c:2a:d2:6a:d5:b8:31:d3:d9:fc:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:4F:58:DE:20:EB:5E:F0:62:A8:06:75:08:07:F3:23:3E:79:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:37:db:47:df:5d:99:3f:15:0d:cd:10:54:a3:57:61:b5:e9:
         11:59:02:ca:62:0a:47:1b:9b:65:55:eb:6d:29:4a:a6:9c:95:
         58:60:1d:0d:df:a2:2b:41:1b:7f:3f:82:6f:3f:99:9f:fb:6c:
         f5:ef:17:f1:fa:1b:7a:96:56:db:ac:3f:da:4f:89:48:bd:24:
         6a:18:78:ce:7e:a9:7f:50:88:6c:a0:1a:62:64:49:d9:07:07:
         c5:2f:95:41:40:d7:21:d6:bf:dc:8b:9c:79:0d:b4:aa:ec:11:
         9c:38:4e:b8:1c:7d:75:c3:3b:18:90:19:3c:f3:cd:dd:18:d0:
         b6:12:ef:9d:30:eb:68:01:a2:d9:c1:c6:60:a6:68:86:53:a6:
         8b:e9:6d:ba:3e:04:54:7e:6d:a0:f5:c7:68:16:53:62:eb:27:
         7b:ad:81:44:29:dd:da:58:b9:d8:40:f8:a7:06:f7:e6:12:27:
         8a:43:3c:a9:d2:77:c3:1f:71:ed:43:50:71:1a:80:6e:8f:d7:
         dd:1b:dc:b7:b3:6a:d1:be:8f:45:96:b7:96:42:6b:06:c7:e4:
         5b:5e:57:3a:0f:a2:df:0f:65:0c:06:95:be:e2:71:69:9b:ed:
         64:cb:87:4e:76:c9:dc:a9:51:73:18:2d:19:de:b8:4c:0b:26:
         92:39:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:37 2025 by rpki-client