Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
File:                     c805133a-6cf1-3d14-bae5-074c7cdbd175.roa (raw, json)
Hash identifier:          /YLZJfx3mypWGaFSu6qCeDv0vnm0fHMtEo8P3Dh5dkk=
Subject key identifier:   E9:46:F4:57:F9:F7:14:24:23:83:E6:E8:3F:06:DC:83:CA:33:B5:2B
Certificate issuer:       /CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
Certificate serial:       010D0C9F4328584ACE0BA449FB2AD4DC075C9400
Authority key identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     22953
IP address blocks:        2620:60:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a4:49:fb:2a:d4:dc:07:5c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=ce5496cf-bd04-44be-9b90-12131de21094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:a3:68:29:fa:6a:04:ab:da:5b:23:fe:f9:
                    17:23:d6:46:4a:75:e4:db:4b:92:60:68:c4:29:28:
                    b2:70:4b:f7:97:83:c5:f9:e2:56:dd:17:fe:d3:b6:
                    27:81:82:d8:ad:dd:fb:ea:2b:15:8a:60:66:20:25:
                    b2:4e:c0:13:36:6e:6d:9b:3d:5c:89:e9:65:d0:9b:
                    80:35:f9:69:3f:20:85:76:e6:b4:b2:fb:e8:d9:ec:
                    4f:19:40:41:64:fd:63:cc:74:54:b6:e0:1e:5a:48:
                    d5:b2:c0:54:e4:e3:3d:13:aa:70:16:63:0a:34:ff:
                    fc:0a:4e:04:41:26:a2:fb:14:e8:29:b8:d4:ab:d9:
                    1a:b5:ce:b1:af:b3:89:4d:9f:13:46:95:ee:8f:f3:
                    2c:03:0c:76:2d:93:71:17:66:00:ad:55:ea:10:fb:
                    9e:63:e6:fa:2d:79:50:44:d5:ec:cd:19:5b:ff:22:
                    3b:b1:91:02:bf:c8:b0:59:b3:4b:a9:f2:60:b4:43:
                    fd:3e:8d:ca:7e:32:8b:33:75:25:a5:7c:ce:c7:43:
                    ce:fc:12:22:d0:8c:36:ab:46:b6:d3:09:e7:4e:fd:
                    c8:ca:a0:15:af:3d:96:c4:92:39:80:84:b0:11:25:
                    7c:5f:34:89:ca:c7:25:14:84:35:71:98:e9:33:94:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:F4:57:F9:F7:14:24:23:83:E6:E8:3F:06:DC:83:CA:33:B5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl

            X509v3 Authority Key Identifier:
                keyid:E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:60:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:d1:56:e3:90:08:99:a1:7a:cb:68:4d:d4:b9:28:89:48:b8:
         a7:80:15:9c:e9:19:45:1e:a6:ba:4f:05:06:96:59:2d:35:02:
         18:e0:c9:15:e5:81:0a:42:c9:67:79:fc:d1:b7:df:de:55:a1:
         d1:68:de:3b:09:bd:2f:7b:ec:12:24:4d:d6:fd:fe:42:3b:64:
         6b:8c:76:87:79:02:91:0f:fd:ab:46:fa:7e:cc:55:bb:6f:ba:
         4c:d6:21:fe:b7:f4:1e:38:cc:66:52:0b:21:bc:a5:b1:7e:16:
         f7:0d:5c:89:b2:42:a3:0c:9e:c8:fb:1a:25:59:83:a4:29:c9:
         a6:6e:a7:ab:54:a1:01:dd:92:38:50:c6:69:46:f4:19:75:87:
         8b:58:ee:54:ac:31:c2:07:39:38:5e:72:e8:09:19:63:d0:18:
         c7:3e:5c:aa:63:8a:82:c2:bd:56:45:0e:24:1a:fd:81:e0:fc:
         11:59:b2:45:b8:92:0a:75:64:e0:9d:0d:90:ec:01:65:b9:99:
         00:61:ad:71:c3:81:d4:81:ef:9d:c3:f8:09:a8:0c:f5:40:4d:
         ff:87:d6:c5:ac:ce:68:b6:9e:98:bf:bd:31:93:cd:b6:4b:71:
         48:bc:26:50:46:da:6c:03:5b:51:ac:91:2e:05:6f:6d:a9:e4:
         83:04:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:04 2025 by rpki-client