Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa
File:                     d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa (raw, json)
Hash identifier:          LqlGc0xYL+uLeYbp4M1VPj7Aajx+nq8gl51huCquLHc=
Subject key identifier:   DD:B4:0F:E6:EB:57:48:F6:1F:87:37:06:89:6A:6A:98:C0:75:4A:FD
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F4328584B21CC1A4FCFEA4460DF0D7240
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     397263
IP address blocks:        2620:8e:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1a:4f:cf:ea:44:60:df:0d:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=e07b5209-e9f0-4436-809b-a0525655ce03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:37:0b:4d:dc:34:44:05:ad:00:e8:6c:9e:
                    d9:e2:c3:5c:fc:ec:42:af:72:f4:fe:b5:f4:29:4b:
                    73:50:e0:36:7f:4d:9f:0f:bf:1e:98:2e:30:bd:b4:
                    f2:8f:e3:77:10:ab:1a:4a:7f:ab:fb:ec:e8:65:4a:
                    21:4e:91:61:3c:39:35:ee:01:da:83:70:be:b8:61:
                    2d:23:ab:3e:ae:19:05:a4:95:99:42:12:0a:d4:49:
                    50:33:ea:8e:f1:63:41:1d:b6:2e:3f:50:46:d7:83:
                    9f:8a:a7:24:ce:6e:51:68:2b:63:29:14:1f:e2:f7:
                    58:a0:18:8b:49:de:0b:50:a2:58:bc:2d:19:b8:85:
                    8d:cc:c4:c3:1d:06:22:44:95:d7:01:1a:af:86:ff:
                    69:d5:bb:89:7f:bf:e3:99:87:44:af:4d:14:0f:02:
                    02:59:25:29:43:8c:4c:f5:2a:f5:a0:a9:23:4c:2b:
                    c1:76:a7:5b:30:d0:f2:08:65:c9:10:96:98:19:f5:
                    10:da:74:2f:22:4c:11:3f:fd:4d:30:30:88:60:c7:
                    c7:bf:9b:c2:d6:4d:74:18:a3:48:ea:bf:b1:76:6e:
                    e8:74:e1:49:24:55:0f:e8:94:c7:35:0d:8f:3b:28:
                    44:db:34:c1:20:b0:2d:76:0c:d5:5a:4b:36:1c:ac:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B4:0F:E6:EB:57:48:F6:1F:87:37:06:89:6A:6A:98:C0:75:4A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8e:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:75:d8:07:1b:c2:3c:56:f2:1a:fe:86:9d:29:35:ce:b3:ea:
         bc:4e:3d:7c:14:04:a1:5c:30:95:26:1c:fa:7b:df:9a:56:fd:
         63:7c:02:b8:bb:f2:0e:13:54:e0:fe:e8:8f:57:08:fc:c1:46:
         ea:70:a9:59:0c:dd:e9:85:d8:95:29:1a:d0:6d:ef:7b:3a:94:
         46:c5:89:27:0f:fa:ea:1b:21:49:85:17:1d:39:5b:a8:42:32:
         00:da:13:d5:53:60:96:1c:20:98:4e:93:ec:e8:5c:bd:1b:2a:
         4b:bc:f0:5c:aa:33:7c:13:3e:bc:ec:d9:13:77:a8:ab:90:35:
         d6:8f:60:22:25:da:0a:51:9c:cd:0e:85:73:3b:47:0f:e4:bd:
         b8:0f:38:22:74:3d:59:58:16:0b:09:d9:2c:cd:45:a2:b8:e6:
         68:34:a5:c4:66:d3:cc:4d:be:e3:63:cc:e9:78:ea:d4:aa:23:
         60:0f:ab:d9:7c:d6:0f:67:f2:78:39:6e:36:d4:19:c9:58:64:
         78:67:54:d9:78:f2:8a:98:04:6e:3f:b3:a9:ef:09:6f:81:d5:
         61:ee:66:b3:4e:a4:37:13:6d:8c:93:b8:04:90:40:4a:66:ee:
         6b:30:6f:91:27:f2:b0:4e:ff:d9:4e:0a:a6:44:2f:48:80:92:
         c6:59:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:03 2025 by rpki-client