Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa
File:                     5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa (raw, json)
Hash identifier:          OoRJQVeOvNztwmn4ei7O+NPPKu12yJVrM/WxNrjkZ7I=
Subject key identifier:   E8:66:CA:3D:C2:C8:D5:4C:96:FA:E3:BD:DD:B0:DB:F3:40:20:2E:F1
Certificate issuer:       /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Certificate serial:       010D0C9F4328584AE89132713A69A5148EDC6080
Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        2601:1700:e100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:32:71:3a:69:a5:14:8e:dc:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=2be12df2-e229-4b9b-b8d6-887e7b355f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:11:5a:88:c2:29:58:11:a3:37:5f:65:f4:
                    e0:d6:a4:91:1c:49:e5:0b:fa:6f:fa:79:86:74:88:
                    db:94:a4:2f:43:17:25:7a:b4:e0:8e:80:0e:40:bc:
                    ba:74:e2:19:b8:f6:c6:7d:ea:f9:6e:26:5d:08:09:
                    d8:3e:7b:4a:a5:4e:bb:b9:f2:fd:c6:f9:68:a5:2c:
                    5b:a7:45:cf:b2:79:c8:2b:4c:e2:74:77:e7:2a:2d:
                    67:ce:76:3b:8f:9f:89:cb:70:c5:d9:13:71:10:c3:
                    21:56:d6:f6:16:a7:5d:f7:88:81:89:3d:a7:26:40:
                    f9:fe:7e:b9:b8:40:85:74:1e:9e:fd:5a:b5:30:17:
                    3f:dc:a1:5a:f8:a5:47:69:6b:60:c9:e8:a3:c0:4c:
                    81:aa:85:69:8b:35:6c:7d:50:d9:03:d0:4b:74:8c:
                    03:92:98:69:6e:31:a0:dd:33:ed:db:d5:16:f7:ea:
                    c1:d2:fb:fa:b4:6e:92:53:af:3b:79:59:00:93:28:
                    cc:66:7c:09:bf:17:a1:6d:6c:ba:f3:17:81:f6:72:
                    a5:97:8d:ee:26:5f:4a:86:3c:89:57:0f:54:e3:c8:
                    03:99:82:78:89:83:1c:94:48:4a:fb:b5:b0:d9:59:
                    51:a9:b9:cd:ab:3c:a8:82:32:96:30:c8:00:24:90:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:CA:3D:C2:C8:D5:4C:96:FA:E3:BD:DD:B0:DB:F3:40:20:2E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl

            X509v3 Authority Key Identifier:
                keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1700:e100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:69:9f:bb:ff:d0:72:fb:77:41:bc:40:8c:39:77:49:67:
         e2:df:ee:bb:1f:d5:f3:15:5a:d2:e6:bc:8a:b8:ef:99:99:27:
         13:8e:dd:2f:54:06:d6:6e:71:32:6c:26:be:a6:68:0f:74:8c:
         27:a5:7e:cb:cb:c1:ad:36:ea:9b:df:43:fd:e3:92:ef:e2:c1:
         6a:3b:b2:8a:3a:84:16:2e:73:6b:b3:4c:b4:cb:7c:91:ba:bc:
         34:e6:3d:30:98:93:30:a7:63:29:e4:cf:72:d0:81:b8:6c:0b:
         c6:4e:d9:99:d2:75:1e:f5:ac:32:45:8a:83:a1:73:8a:62:7b:
         6b:ef:b9:46:06:12:50:96:0a:93:77:58:de:dd:14:3e:35:a9:
         57:16:2e:2a:3b:89:26:27:2a:56:03:fd:7f:73:3a:e9:01:63:
         3d:39:a6:d9:d6:ac:cb:ec:e7:b9:e6:17:e0:d2:f6:7a:e6:e3:
         2a:ec:70:c3:26:93:f2:19:3d:38:53:3a:db:62:6b:0d:75:cc:
         37:31:e2:aa:7b:38:a5:ef:de:55:36:1e:33:0c:09:33:ce:ea:
         a9:2b:bf:8d:84:bd:54:d2:33:c4:4d:fa:93:db:67:e2:f4:b2:
         09:d4:d1:61:c9:21:9d:b7:d4:48:05:22:50:17:f5:52:97:c2:
         e9:dc:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:09 2025 by rpki-client