Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
File:                     92f50bb4-500d-3973-8016-ce46dbe2eb06.roa (raw, json)
Hash identifier:          X/cqyM8xlCXb/1P5D7EHflAL7nCdUFDIvIdbDDvR+uE=
Subject key identifier:   CD:19:72:C4:12:E9:80:93:DA:09:D9:92:D6:C6:50:B7:89:7A:5B:BF
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F4328584AFC1C081430291BCBF58383A0
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     54070
IP address blocks:        2620:dc:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:08:14:30:29:1b:cb:f5:83:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=df5e451a-0783-4703-a2c6-b52e61f9bd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:9f:23:34:25:fd:40:e4:40:3f:aa:0e:28:
                    50:e5:3d:dc:eb:98:61:5f:2e:27:c0:44:91:dd:74:
                    64:0e:05:72:cc:ce:dd:53:52:91:27:84:e2:ce:4b:
                    25:d8:9f:56:b1:dc:83:e9:44:d4:35:f3:ed:d5:6f:
                    0a:63:3e:69:ef:e3:bd:b0:13:46:1a:31:48:00:92:
                    36:a2:94:f8:ea:8d:96:67:7a:1c:af:85:66:dd:c3:
                    96:6a:2c:35:7b:8c:8f:25:c6:04:18:4a:f0:ff:1c:
                    4f:65:0e:45:17:b8:1a:d9:a8:c3:38:dd:20:24:9b:
                    cc:18:a6:4b:b5:86:4a:2b:53:0e:a6:aa:49:73:dd:
                    24:cf:a2:eb:cf:1e:f1:84:ac:56:1d:da:15:4f:ee:
                    7d:37:b6:06:c8:4a:15:18:d0:3f:f5:e5:b9:00:fb:
                    8f:90:15:24:ec:e0:09:58:69:b1:30:fa:ed:5e:98:
                    6e:fd:c0:73:d3:16:04:b5:1d:58:b4:ca:e7:d6:06:
                    55:1b:ad:b9:32:4e:04:3c:6e:f3:72:b2:88:f6:2e:
                    42:ba:a8:9c:bf:52:2a:99:b4:c5:d4:e0:a8:40:9a:
                    f1:0b:43:7e:36:e9:ba:23:91:a5:d1:7f:9b:24:94:
                    03:90:59:af:86:76:cd:f0:9d:97:a1:72:86:4f:91:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:72:C4:12:E9:80:93:DA:09:D9:92:D6:C6:50:B7:89:7A:5B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dc:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:ab:cb:0f:31:f7:f1:ea:b4:83:ce:7c:72:66:a1:37:88:
         6f:63:ca:a9:d0:03:1e:29:ae:de:a6:d4:f5:a7:20:ba:8c:d5:
         3a:a9:55:3f:b1:73:1d:c8:75:76:9c:ff:0e:b5:82:82:ba:8d:
         9b:00:65:d8:33:1e:6b:d2:47:5f:17:29:3d:e7:a6:d8:9d:1e:
         60:11:0f:80:47:3d:02:48:e5:41:66:5c:6d:15:fa:74:34:70:
         d2:4f:b8:5c:71:29:1f:93:e9:ea:f2:f7:f1:98:7a:74:9c:14:
         01:2a:b4:b4:a6:51:a7:e1:e9:13:5d:5e:dd:56:e8:1b:e9:fa:
         8f:cf:24:0f:58:91:ee:d7:79:36:7e:dc:ea:22:68:dc:12:83:
         7b:30:9b:7e:29:9f:fd:7d:db:9b:40:1f:bd:19:5f:1e:ef:36:
         cc:62:a1:61:80:1d:48:ff:3a:95:9f:6f:e7:3e:39:52:07:e8:
         d9:ef:89:36:a5:56:16:51:fe:b2:e6:5a:aa:79:18:3a:57:6b:
         9c:ec:9a:86:00:7d:59:18:f6:0d:43:66:f5:4e:c5:61:8b:89:
         48:9e:e3:ee:34:b8:7c:15:5e:9b:7e:8e:ac:89:67:8d:74:d6:
         df:64:06:dd:bc:99:c8:b4:96:3e:3b:f7:fd:85:72:0f:94:1a:
         fe:e8:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:08 2025 by rpki-client