Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa
File:                     6929cfef-7615-3f63-bffe-70eced470d39.roa (raw, json)
Hash identifier:          ynRJ0EBtPDPPZK2zKvK4Dv7LOa6B51rKmTDIPCYM4aQ=
Subject key identifier:   20:1C:46:DB:9B:42:24:F5:37:40:85:2F:15:2A:EF:28:C6:69:DC:8B
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584B1C36CE99E5571AA00E058E80
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2620:c1:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ce:99:e5:57:1a:a0:0e:05:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e42e2afa-0b15-4138-a16c-b11f5e254c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:cb:c3:3c:71:ba:4c:e7:78:2f:97:a5:e1:
                    a7:4d:e4:c5:31:54:a6:7e:a7:31:2b:75:3c:9c:01:
                    01:b3:2a:99:59:48:78:8d:02:f8:e6:ae:d1:da:f9:
                    2c:80:d4:4b:73:0f:61:85:b4:7b:2d:ee:fa:25:f1:
                    b0:05:3d:ff:2c:b6:fb:e6:00:2f:5f:1c:d0:9f:dd:
                    66:2d:24:9a:e3:19:5c:70:6d:bf:4f:c5:1d:93:88:
                    34:d3:62:e7:6f:8a:c1:8d:5d:7f:23:c2:48:5c:73:
                    27:41:9c:2d:e6:1d:53:42:6d:b4:53:78:52:c8:fe:
                    aa:14:7b:21:c5:c4:49:2a:ec:46:f5:e5:26:0a:05:
                    8b:8c:32:12:c1:2f:07:29:fd:6f:dd:7a:52:b9:01:
                    58:fe:e2:54:22:24:c9:da:b1:87:f7:3b:f6:79:10:
                    49:9f:bf:05:5a:64:c5:4d:b6:1f:d0:5b:5e:4e:f1:
                    8a:64:d2:b8:99:e2:28:8f:25:00:e3:0a:96:a6:66:
                    74:bf:ca:6c:cf:6f:b7:fe:d7:e9:e5:a7:7c:d2:2e:
                    3e:88:bb:42:00:1b:6d:22:18:54:68:e5:08:4e:ae:
                    28:53:e3:49:10:e5:2a:5d:d1:8d:49:ec:bc:35:11:
                    40:74:7c:5c:08:99:a9:97:26:cc:af:70:f9:d6:1e:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1C:46:DB:9B:42:24:F5:37:40:85:2F:15:2A:EF:28:C6:69:DC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:15:36:f3:17:41:47:0c:4e:9a:ab:64:52:6a:df:26:fb:79:
         46:4a:a2:29:15:d9:2a:49:0a:d2:98:db:ee:c5:79:ef:4b:76:
         b1:e8:2a:de:4c:15:9d:37:1a:b7:62:e4:28:2e:01:d6:cc:9b:
         32:fd:28:71:86:d3:ee:4a:2a:44:3d:07:87:49:f9:39:de:a9:
         2d:ee:e1:b8:1a:de:e6:b0:54:05:c5:96:02:79:53:ed:56:d7:
         52:b6:25:22:d1:57:c4:49:5b:7f:c4:9d:8f:3f:39:81:6d:45:
         fe:4d:92:8b:cc:c0:2b:16:f6:33:8c:96:61:4e:dc:85:3e:2b:
         3f:02:ba:55:28:ae:d0:ae:f2:15:74:54:4b:2e:a7:0e:89:43:
         35:b5:43:06:3e:5c:3e:a3:6c:87:02:65:29:b3:c6:a6:15:d4:
         70:af:ac:e0:64:15:c9:c8:cf:c9:c3:96:0f:d0:7d:97:8b:ba:
         0a:bf:7c:79:21:b2:fe:45:c6:ed:20:32:17:56:ff:4d:61:b8:
         b4:7d:ca:45:08:e8:7d:f6:67:1c:b6:11:e7:57:cf:8c:4f:4f:
         8c:3a:bd:dc:3e:14:ca:dc:1a:c3:04:2f:53:f4:07:cb:21:4f:
         07:47:bc:a6:db:9c:e6:0a:4a:d7:7a:80:9f:e5:4b:26:48:02:
         f2:d2:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:37 2025 by rpki-client