Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa
File:                     682b6135-e067-305c-a752-4e63ad4480df.roa (raw, json)
Hash identifier:          3mcOaV9uLJr69P6dbROg0qnByGsK4BlVYCqhO9e91jE=
Subject key identifier:   16:C4:57:48:94:F4:2E:1A:9F:35:8C:E1:ED:90:77:CE:3B:7D:CE:D1
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F4328584AC2E0F4942736FA57EA73F1C0
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     40153
IP address blocks:        2620:8d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f4:94:27:36:fa:57:ea:73:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9480e459-0427-499c-bcfc-965c5f7b6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:ee:df:70:c5:70:a9:23:56:70:7c:a2:46:
                    ca:fd:10:6a:e9:e6:ec:65:46:76:15:8e:2a:e7:19:
                    bb:ac:43:a4:fc:4c:aa:88:02:2c:73:e5:93:d3:24:
                    81:41:6c:79:3e:94:29:44:e1:ad:45:62:0c:f0:78:
                    98:b2:0d:91:ea:f8:16:88:d5:ef:17:4e:76:58:89:
                    6d:be:5a:4a:34:99:1f:62:dd:5e:be:c3:90:e3:e8:
                    1a:0d:a5:88:f6:5c:c3:fc:86:58:93:9c:26:6b:fd:
                    7c:3b:2e:a3:30:53:06:0b:ff:15:c9:e6:f0:76:16:
                    cb:0c:6e:54:da:e8:0b:00:35:54:74:49:57:ef:e9:
                    b4:a9:4e:e1:94:b7:8f:2d:e6:64:f8:f5:ef:de:87:
                    f8:14:d3:f0:b1:9e:77:f5:91:b9:cd:9a:0e:c1:c2:
                    a7:3c:ab:1f:2f:c7:d3:ca:23:77:d2:46:cc:98:23:
                    cf:d4:99:0a:87:be:4d:3f:13:12:ee:83:22:d2:3a:
                    fa:71:d5:e5:c5:41:0f:cc:30:5e:c3:01:7c:7e:6a:
                    97:d6:10:c0:b0:0b:9f:b2:fd:60:fb:7f:12:4c:70:
                    c4:9f:f3:a1:dc:25:39:83:28:f1:1a:c2:7a:47:ba:
                    05:4a:46:d0:35:44:44:a7:ba:e4:dd:2e:0c:38:77:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:57:48:94:F4:2E:1A:9F:35:8C:E1:ED:90:77:CE:3B:7D:CE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:31:ef:a6:aa:71:8a:e2:98:89:f7:c7:25:de:2e:a1:cf:
         4e:c4:7e:a8:92:fd:46:a3:84:4a:3d:ae:6f:20:b8:0e:c5:39:
         a1:fc:1a:75:cb:d2:0e:af:6c:59:47:4b:80:c7:a2:18:d2:13:
         07:16:0d:32:ee:19:8b:c4:78:bc:64:fc:7f:70:3d:5f:e3:be:
         db:7c:4d:58:8a:c0:07:9e:fa:c7:a5:75:bb:8f:e7:f7:4f:2a:
         4a:c1:27:cb:2d:51:fb:79:88:31:a0:05:46:10:70:0e:17:5a:
         71:ae:fa:c6:57:e0:ca:83:de:ca:02:48:cb:5f:95:50:22:67:
         ac:c4:75:d3:0a:6e:7e:80:69:de:39:3e:fc:ce:c9:df:0d:02:
         a7:d8:c7:5d:db:3a:f7:09:bc:01:71:11:c3:11:31:6e:ef:20:
         ac:21:fe:9d:4f:dd:f1:81:a5:58:8b:bb:50:aa:cd:9e:15:c4:
         fb:2a:0d:a5:08:fe:cb:f9:d5:42:b0:61:2e:20:97:9b:81:1a:
         c1:b8:ba:17:db:87:ca:f4:e4:a9:c8:c0:cb:6f:b2:85:85:aa:
         74:25:d7:eb:7c:65:d4:0d:36:ed:9f:d9:69:39:41:22:c5:ba:
         43:e8:ee:af:c2:a1:4d:af:90:ce:36:35:c7:ca:d6:fa:70:d1:
         91:c5:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:15 2025 by rpki-client