Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
File:                     9be113fd-a906-3adc-abd9-41ca44625fae.roa (raw, json)
Hash identifier:          Jm9CgMhDywV5uUnUxlYCs02T0aOey4YAewfF/qLHirA=
Subject key identifier:   47:AE:AF:22:96:2E:A6:1B:F0:6C:B4:5F:9F:79:64:7C:7F:E3:3A:57
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584AE0311D84086F235DD6EB6740
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     4185
IP address blocks:        2620:0:610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1d:84:08:6f:23:5d:d6:eb:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e73f17ef-c7b4-4712-8a4a-6f42c53a48f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:25:44:de:e5:ac:0f:9d:f3:8f:7e:f5:45:
                    22:d9:6b:10:56:35:b8:e8:ec:c4:5c:a2:c0:29:ba:
                    12:d7:0b:74:bd:e0:bc:3a:bf:90:82:19:1f:55:f2:
                    de:2d:2c:ce:45:b7:38:e9:0d:96:a5:1a:71:87:18:
                    e9:b6:a3:93:8c:ea:06:24:50:8c:cd:61:01:28:06:
                    78:ed:ea:fd:30:dc:8b:fb:c4:83:02:59:73:8e:b5:
                    9d:9b:32:69:e2:a4:3e:40:e1:a7:b1:1e:a1:2b:fd:
                    8b:7a:e6:3b:6b:4f:5d:84:94:a1:85:da:10:28:d7:
                    00:79:28:5d:55:85:76:db:ea:20:cd:80:94:49:d5:
                    1e:58:cd:ab:78:d8:d8:8d:14:8e:de:4e:e3:05:ec:
                    b4:4c:31:48:be:e9:c0:7a:91:48:0b:74:e2:61:6b:
                    90:e1:08:c7:af:05:f5:54:5f:60:ec:ab:c0:20:83:
                    23:05:43:4b:1c:25:91:b5:95:eb:e8:a1:1a:0a:68:
                    33:5e:34:a1:07:7b:46:6d:56:fe:0f:30:10:5a:c3:
                    90:60:28:22:ef:8a:76:cd:63:ad:fa:5f:a3:c6:7b:
                    b5:1b:bd:80:9d:0f:62:c8:41:ba:06:5e:f3:12:79:
                    3e:8b:86:80:fd:42:a6:c6:69:a5:43:74:a8:92:57:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AE:AF:22:96:2E:A6:1B:F0:6C:B4:5F:9F:79:64:7C:7F:E3:3A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:2e:6a:c2:a6:77:4e:b1:c5:45:44:72:4d:c7:57:99:a6:
         60:ca:ae:56:77:4d:bb:73:74:b0:bd:c5:72:07:92:17:83:89:
         36:db:db:e5:c7:f4:eb:6a:de:b0:f2:56:2d:84:5f:a4:04:6c:
         fd:a2:33:93:51:e7:3c:1d:6e:ee:32:d1:cf:e0:d0:bd:5d:09:
         c4:5c:de:8a:fe:eb:b5:f6:9c:c6:bf:f3:27:77:ce:30:ff:5b:
         5e:e2:a4:08:40:e4:72:01:e3:a8:93:4b:01:d1:8c:40:bf:a0:
         87:68:a4:a8:cf:a4:6b:71:5a:42:09:81:42:fd:e4:bd:12:73:
         39:11:f2:43:78:60:0b:6c:37:b1:50:32:23:52:88:a2:8b:70:
         70:19:ba:32:76:2d:7b:ea:b9:af:aa:91:b1:f3:6a:41:15:e7:
         16:14:d7:31:96:ba:96:01:c0:db:e2:8c:bc:bd:2b:eb:68:64:
         f1:7a:16:85:3e:35:d1:c3:12:35:16:4e:03:96:83:4c:ee:95:
         14:b8:53:9c:7f:59:8f:cc:ab:5b:8a:1c:e8:2f:34:dd:c5:cf:
         a2:36:2b:d9:b9:23:aa:87:0c:97:66:eb:54:e7:f0:4a:1b:4c:
         8f:31:fc:ec:ac:b2:99:77:90:be:2c:35:ff:83:11:04:06:a0:
         ae:84:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:52:22 2025 by rpki-client