Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
File:                     a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa (raw, json)
Hash identifier:          L4F+eraLs3YkdVbwJKUAjeJDt0U6hnZdnn93SKtkL6Y=
Subject key identifier:   15:69:CB:D0:05:B1:12:0F:21:65:46:96:D7:EC:95:A1:05:58:A5:F2
Certificate issuer:       /CN=cc16c3db-6181-4312-8911-054e81ccea5f
Certificate serial:       010D0C9F4328584B758C93A1BE9BFB832D2A7600
Authority key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     5719
IP address blocks:        2620:101::/46 maxlen: 46
                          2620:10d:1000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:93:a1:be:9b:fb:83:2d:2a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=7f15c66f-e6f9-47fe-97e4-c6ee97941051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:59:b5:45:b2:c4:0e:f3:8d:ef:aa:29:38:
                    cd:ff:f1:65:08:97:5f:1f:9c:f5:04:73:5e:7d:f7:
                    36:81:97:9c:63:06:27:a5:b7:29:a7:06:37:81:68:
                    f1:50:52:05:ac:88:b4:84:80:d7:a4:8a:9e:3c:a9:
                    a9:6b:30:8a:d6:a2:e5:cd:8e:06:55:d4:95:5f:66:
                    fb:03:70:21:0b:1e:69:6b:7e:00:69:a3:88:af:00:
                    70:c3:db:13:98:11:f9:b5:2e:13:73:ac:9c:ef:95:
                    bb:e8:f0:52:9a:d5:f0:c7:e3:80:ca:94:2f:5a:83:
                    45:b9:ea:66:d8:ca:49:ac:7c:9b:e8:b7:60:5e:e8:
                    37:77:72:69:0b:3a:aa:eb:30:e5:87:2a:4f:ef:3c:
                    6a:e0:87:38:fc:4b:07:e2:f1:4b:2b:73:1a:9b:60:
                    99:4e:12:20:ce:06:00:07:99:32:41:65:88:f9:e7:
                    e8:68:69:66:0f:fb:2d:9c:c9:c5:fb:85:f6:7b:18:
                    22:e5:4e:91:34:d0:e7:9d:62:2a:25:50:2c:1a:98:
                    80:04:75:22:35:c8:c0:67:4a:44:e2:9d:f3:5f:02:
                    ad:1a:f2:5d:a3:40:31:03:e6:d4:b4:e7:21:85:ea:
                    47:77:0f:e2:04:17:12:00:0e:be:a1:48:01:d9:73:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:CB:D0:05:B1:12:0F:21:65:46:96:D7:EC:95:A1:05:58:A5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:49:bb:64:f4:bc:66:08:99:8b:ee:de:5c:c2:24:ed:50:
         ec:b1:5c:9b:49:04:a1:5e:c0:6a:e1:42:00:e9:67:79:f3:a6:
         8a:06:a4:3c:6b:c1:17:17:01:d1:87:d1:e8:a7:62:dc:28:93:
         48:85:bb:04:c0:62:9a:4f:b5:b5:14:73:32:54:68:43:e7:38:
         b0:4a:f6:96:14:e0:05:03:1f:3e:c8:2f:80:a3:2d:7b:de:73:
         d4:1e:4b:71:2b:15:2d:20:ef:26:e0:5a:40:aa:30:fa:f8:7b:
         74:bf:ff:e9:7f:d6:3a:36:c9:c2:de:a8:b0:ac:90:d9:81:9f:
         80:99:27:54:d7:71:98:55:ef:8c:f2:1e:04:85:50:37:be:3e:
         17:97:d0:af:e0:2f:78:c6:b2:75:96:35:8e:49:21:6b:65:87:
         ce:b5:4e:73:cc:4e:26:1c:fd:f6:76:9a:63:2a:1d:3a:97:62:
         5d:58:62:6b:05:09:30:25:db:f7:e7:a0:14:84:92:c8:ef:5a:
         5e:43:8a:ba:2c:14:6f:bd:74:e4:26:19:63:be:94:ce:cb:60:
         22:d1:88:dc:4a:83:94:32:c8:c2:41:ed:29:ab:6e:67:a2:d0:
         b6:6e:9d:2b:e8:94:4a:09:b9:f7:21:a4:c4:51:9b:27:a8:ce:
         40:d4:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:47 2025 by rpki-client