Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f250fb-e94f-36fc-903b-00e9fd9a25ba.roa
File:                     d1f250fb-e94f-36fc-903b-00e9fd9a25ba.roa (raw, json)
Hash identifier:          GBrW5uL971Mnh15LZjV4X/pnLqc9NCRMXibZUaPZ0R8=
Subject key identifier:   12:C6:67:B7:13:18:8B:25:6C:D3:89:EC:7B:F9:03:7C:64:5E:0A:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584ADA9BCEEE7CF5AA8FC721BD80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f250fb-e94f-36fc-903b-00e9fd9a25ba.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     20115
IP address blocks:        2603:60c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ce:ee:7c:f5:aa:8f:c7:21:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=6b1ebdcd-46e2-4ed0-b300-0c3b5533c593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:a6:ea:d9:a4:78:b3:f1:7f:1e:6c:43:ab:
                    7f:4e:d6:8e:a6:33:9e:6a:7d:e4:0b:72:7d:43:28:
                    b8:24:eb:f7:84:e6:d6:00:0d:59:79:3c:f0:a8:57:
                    d3:1b:e5:e0:4e:09:c2:cb:83:fa:f3:91:29:ea:7a:
                    60:47:cc:55:c9:2c:06:ca:3d:57:79:7b:a3:69:d0:
                    d5:fa:bd:6c:5b:23:b7:be:c6:bb:04:a6:ea:40:7d:
                    6e:b3:3e:65:7b:0d:83:88:72:a1:03:96:83:4f:0e:
                    ed:22:f2:52:46:35:80:57:c6:7d:77:40:97:de:99:
                    44:be:50:91:06:08:60:6b:75:27:ae:93:02:a8:06:
                    3f:d3:04:a9:83:57:5d:07:4b:97:04:02:95:5b:16:
                    0f:bb:77:d6:a0:f7:75:74:51:0c:11:ac:c0:15:cf:
                    8b:b1:fa:92:c1:81:1d:bd:24:63:21:e1:90:49:dc:
                    61:ae:39:75:28:91:44:f7:94:61:5d:c0:cd:0e:48:
                    fa:1e:d7:24:c7:30:67:9d:46:b3:c6:bb:7d:36:7d:
                    70:ec:a7:36:3b:60:cb:c9:32:d8:b8:1b:d3:66:e8:
                    c6:f9:cd:d0:80:b3:01:a1:2d:83:e5:e9:dc:cc:35:
                    99:4d:94:28:59:8d:90:04:35:d1:cd:55:44:06:a5:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C6:67:B7:13:18:8B:25:6C:D3:89:EC:7B:F9:03:7C:64:5E:0A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f250fb-e94f-36fc-903b-00e9fd9a25ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:60c4::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:75:05:13:19:42:58:50:da:65:7f:ab:de:ad:5c:6f:fa:
         ae:e2:32:82:2f:fa:4b:f6:70:f6:42:ae:b1:da:b4:a0:1d:22:
         37:1d:b2:4e:5f:13:19:ba:d5:33:fe:22:45:c6:8a:e6:13:4d:
         e1:d6:51:b2:d2:2c:a0:26:b9:4c:c5:62:5c:7a:90:b5:c5:cc:
         02:f2:4a:38:43:43:29:e4:0d:7f:b6:78:8a:8e:aa:f9:c5:26:
         23:9b:fc:ac:f7:64:14:22:e2:44:03:b0:11:9e:66:ab:ac:44:
         42:5c:ab:ee:bc:52:1a:1d:2f:3c:d2:4c:44:50:33:89:5c:88:
         88:1b:20:97:d0:ff:a4:9f:2d:02:c9:7f:72:40:6a:d7:d8:1c:
         85:b4:c3:d4:2f:28:79:04:37:66:1f:33:8e:7d:11:f9:c0:74:
         23:79:fb:98:80:e2:e4:b9:f0:ff:5a:b3:e7:c6:f7:28:77:5e:
         f8:e2:40:c3:79:71:92:45:9e:95:f7:4e:ba:6c:83:4d:e6:9f:
         e9:c4:b4:37:25:b5:78:d2:16:b7:50:50:1c:cb:e6:e0:0e:a1:
         32:cc:bf:89:5a:d7:a2:f1:6d:52:7a:2e:ce:d9:29:19:e4:08:
         eb:95:d1:2a:45:59:d1:63:09:6e:b9:d6:c0:fe:31:ce:d7:6b:
         8b:04:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:02 2025 by rpki-client