Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa
File:                     2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa (raw, json)
Hash identifier:          8AXpjWPCvKzJdXcKr8um4T/XdiHWxdW/WCBZCWFXw5M=
Subject key identifier:   27:F8:41:1D:F6:F9:C0:9E:A3:E4:59:14:4E:81:86:AE:43:B4:8C:CA
Certificate issuer:       /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
Certificate serial:       010D0C9F4328584ADDF552E39E5A54E4B99398E0
Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa
Signing time:             Fri 15 Aug 2025 17:48:42 +0000
ROA not before:           Fri 15 Aug 2025 17:48:42 +0000
ROA not after:            Thu 13 Nov 2025 18:48:42 +0000
asID:                     19905
IP address blocks:        2620:ce:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:f5:52:e3:9e:5a:54:e4:b9:93:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619
        Validity
            Not Before: Aug 15 17:48:42 2025 GMT
            Not After : Nov 13 18:48:42 2025 GMT
        Subject: CN=8f30a7fe-3ca5-41e9-8b1a-d71e2f95dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:a9:24:ec:93:f2:61:85:2e:e3:32:cb:68:
                    e0:5b:d9:7d:0e:b9:5b:da:56:d6:0c:6d:4d:7f:47:
                    a2:9b:65:00:04:1a:8f:dc:97:64:72:e3:3e:3e:7a:
                    70:d6:86:a6:3a:59:35:c2:32:6b:be:2e:dc:ea:da:
                    58:9d:b2:9a:19:1e:dd:83:ea:ee:87:9d:de:33:81:
                    22:50:c3:57:42:4a:91:20:c1:40:00:96:1b:0c:2c:
                    08:e5:9e:8b:54:29:2a:fd:ff:bd:21:d9:31:79:72:
                    85:f9:e2:bf:c4:dc:40:d8:98:09:43:f5:af:05:81:
                    15:8e:9d:fa:6e:a3:2e:8d:e6:c0:df:06:c6:f7:46:
                    86:de:d7:6a:60:b0:92:7c:7e:49:f1:3d:23:f0:8a:
                    cd:55:c8:3b:34:c1:f6:53:63:9c:5a:09:72:ed:b3:
                    e7:8b:d7:5a:48:33:de:ca:74:2c:6f:20:73:08:13:
                    97:82:49:fe:77:dc:68:9d:56:66:57:24:da:28:a3:
                    17:41:d8:50:8d:9b:8d:85:98:6c:65:1e:ae:98:69:
                    79:06:ec:b4:60:21:63:1e:91:82:b1:05:f2:6b:bb:
                    bf:45:a1:32:e5:50:02:9a:9c:53:14:c0:aa:80:e8:
                    33:6d:8b:67:0b:2f:e8:97:4e:0f:64:5e:b6:4f:f5:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:41:1D:F6:F9:C0:9E:A3:E4:59:14:4E:81:86:AE:43:B4:8C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/2683d3fd-fb06-3d2b-9462-9060b6100cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl

            X509v3 Authority Key Identifier:
                keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ce:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:47:19:eb:4c:e4:c9:78:28:42:4a:44:57:ea:b5:76:a9:ff:
         8c:c3:a4:28:53:5e:4e:c9:e0:47:60:1f:0c:9e:8c:58:bb:27:
         ee:b8:1c:5e:2e:ff:f4:2d:df:86:c7:f0:8e:66:b5:00:78:88:
         51:f2:39:57:9d:8f:cd:af:8b:7e:1a:cd:71:83:36:0e:9c:3d:
         25:de:3a:c5:6e:a0:ed:49:d7:6f:45:2a:a6:9b:74:21:2d:a0:
         ab:9d:84:8a:8e:ef:90:4f:a9:78:5e:b7:7e:31:c8:bc:6f:7b:
         fe:73:7b:93:68:99:a7:54:08:e9:0a:94:fb:20:49:07:f4:3d:
         69:79:91:dd:a7:d3:66:cd:dc:71:a7:ba:b7:bf:6f:26:1b:9d:
         2a:72:f3:bf:65:5f:11:d2:9c:f2:0b:a5:56:1c:38:81:a8:0f:
         dd:95:a8:b0:99:47:3e:28:a1:63:8f:fe:f8:03:8b:b4:6a:b6:
         37:04:3e:33:7d:de:ef:6c:ef:db:1d:73:72:1f:c6:92:ca:98:
         c2:29:2c:a1:5e:97:f9:cb:ed:66:8d:04:66:fa:8d:fc:0d:50:
         63:a3:2f:6e:c9:97:6c:52:91:5e:b2:b1:2b:ed:c9:0b:ee:a0:
         f1:f2:94:c9:60:55:82:87:54:06:62:4d:f3:30:cb:23:be:0d:
         ec:e9:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:05 2025 by rpki-client