Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
File:                     ccc01a9a-613a-39d0-9585-0e61958db9f6.roa (raw, json)
Hash identifier:          KZOkvKqg93ZV+U/bIyIldnwodSq3kBzkjxqfqu8g25o=
Subject key identifier:   D5:89:E1:4B:94:98:96:2D:C5:60:90:BB:64:FE:29:0B:F8:4B:5E:62
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584AC01628C11335CFE19E2F8480
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30698
IP address blocks:        2620:11c:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:c1:13:35:cf:e1:9e:2f:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=5c065d68-cca3-4fd8-872c-6dca5bb4f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:b7:ad:0a:cb:2f:ef:28:64:24:85:43:e7:
                    df:33:d0:a1:78:a1:b7:68:f0:ad:05:6e:44:16:3f:
                    9f:b2:13:10:88:50:35:8e:b1:83:4b:95:6b:78:ad:
                    62:62:b4:6c:c7:b1:b0:7b:37:1c:e9:60:6f:d2:76:
                    8e:a3:61:da:57:bf:d9:a2:34:1d:40:bd:ef:7c:33:
                    ca:e3:be:d7:a9:ea:27:b9:24:42:c5:0b:50:c0:b9:
                    45:bc:3f:ab:f5:fc:74:07:af:9d:6a:33:72:c4:1e:
                    00:4f:a1:9f:f6:bb:63:cb:cc:6b:6b:be:55:79:6e:
                    d8:05:8f:74:86:58:01:0f:2c:7d:3f:90:a6:3b:4c:
                    99:3e:f6:d2:3a:d0:37:84:b7:fe:8a:f8:96:4a:47:
                    d3:83:02:9b:42:08:02:2c:0e:e1:78:07:4a:b3:d3:
                    02:69:bd:80:03:ce:40:89:84:f5:a9:c1:66:82:d6:
                    08:22:56:2e:c3:6f:56:fa:c7:d2:5c:c5:dd:8e:11:
                    a3:8f:52:a1:aa:ff:5a:1a:db:ad:a3:07:e2:93:77:
                    a6:fc:dc:67:ac:65:4f:14:a4:5c:d0:ed:e1:9b:fa:
                    8e:0a:2c:5f:76:a5:8d:48:a9:38:b4:21:12:44:92:
                    75:e2:4d:73:42:4e:f4:91:49:ff:83:88:ba:f4:9e:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:E1:4B:94:98:96:2D:C5:60:90:BB:64:FE:29:0B:F8:4B:5E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:11:2d:bd:d2:69:bc:2b:f7:fe:4d:a5:dc:23:5f:3f:e1:
         89:f7:3e:88:7d:39:14:5d:a3:ae:20:58:ae:a2:02:71:9b:b4:
         75:5b:59:9a:91:98:cd:dc:5d:53:49:b6:25:97:59:6a:c6:f5:
         1f:8f:ff:88:6c:5a:94:8b:33:1a:67:da:e2:0c:28:5c:e5:85:
         bd:68:57:fb:cd:a5:31:f0:61:57:c2:aa:95:9a:14:b2:58:08:
         9e:26:18:28:42:f3:b7:e4:5d:9b:17:8f:fc:2a:3b:60:b6:a1:
         ba:b9:41:99:5c:07:91:cf:b2:42:59:1f:f0:43:ec:b3:13:16:
         f7:c0:72:49:01:7e:12:37:5f:0c:d5:9d:da:e8:75:41:66:1d:
         d8:cb:16:5c:d9:32:df:55:08:30:f5:8e:ec:ea:e1:93:39:ea:
         e6:36:76:61:20:e9:54:1e:b2:3d:70:66:4c:10:4a:78:2f:4e:
         d1:20:33:85:6a:ec:07:5f:e2:6b:fd:7f:7a:bf:b6:10:32:84:
         2c:13:67:fd:fd:2d:46:9b:13:97:ba:4b:8c:c2:f7:d2:2d:8b:
         2b:ce:41:48:eb:3d:66:f1:60:e8:d3:fd:54:61:ea:03:de:a5:
         b5:c2:86:b2:93:c2:90:76:47:ba:f0:0a:cf:87:de:f0:e0:ba:
         01:62:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:47 2025 by rpki-client