Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
File:                     9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json)
Hash identifier:          ZCuDyGOYjqvOSK8vt1inSqtmLc+X83PMBCByv8tEz1U=
Subject key identifier:   5E:F8:95:89:FD:B9:4B:AA:3C:C9:7E:43:63:28:E6:06:36:8F:0A:62
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F4328584AE4611B738BC8DA3D69FFBCB0
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2620:20:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1b:73:8b:c8:da:3d:69:ff:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=dfc731a7-34fc-46a3-b521-c6bba9bc5d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:5b:be:43:20:80:23:b6:cf:ac:3a:96:f4:
                    ad:2b:a5:13:8d:b6:55:78:8a:42:38:e1:38:41:25:
                    ae:98:0d:c3:1d:68:81:ce:b5:53:5d:c0:b7:87:1c:
                    45:38:cb:da:2d:35:08:30:74:0c:78:b0:b6:3b:54:
                    4f:c8:12:6b:84:6c:5d:7d:b9:36:e6:06:37:d6:93:
                    6b:0e:02:e3:f8:fe:bf:5d:b2:5d:17:ac:83:1e:3d:
                    55:ca:ca:68:f2:77:2c:91:ba:c1:11:f7:a8:0c:e7:
                    ac:87:e4:02:a9:20:33:8f:af:36:0f:52:42:30:d2:
                    8f:37:72:25:54:ec:28:20:f0:31:6f:ed:19:36:ee:
                    f3:a4:91:de:64:0c:19:f0:21:e4:45:f4:9d:bd:9b:
                    71:59:b9:6a:04:fc:78:0b:e0:29:5f:cf:af:0d:f2:
                    2d:fb:f3:97:d4:7f:d9:86:b2:90:7b:84:5f:d0:ff:
                    76:7c:75:d5:0c:65:76:91:ee:af:65:67:a7:18:97:
                    9a:6a:18:85:26:f2:5e:8d:fc:21:50:13:dc:ae:ed:
                    61:6d:de:8c:7a:a3:f4:98:66:39:88:32:c5:0d:e2:
                    3b:31:06:a2:ab:03:fe:a1:11:00:98:97:1b:dd:24:
                    d6:2f:89:43:b1:46:3e:13:bf:22:32:1e:9a:3c:20:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:95:89:FD:B9:4B:AA:3C:C9:7E:43:63:28:E6:06:36:8F:0A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:b3:00:48:49:38:29:73:07:5e:1f:70:a8:3c:c9:14:5d:
         35:08:80:88:9d:ba:e6:a4:84:cf:df:70:d4:72:7b:f3:db:62:
         40:fb:d6:83:3a:0b:a3:94:18:bd:c0:f7:f2:94:4c:80:e2:48:
         62:75:ec:ea:3a:f9:dd:8c:de:a2:3c:54:93:37:af:6e:bc:77:
         61:fa:4d:08:f0:2f:f7:13:1f:42:f2:46:82:e5:67:ab:5b:a7:
         01:6b:ad:8f:9d:8f:49:56:7f:f2:8c:06:14:0f:c7:37:2d:bf:
         19:b1:fd:f3:41:95:66:01:b7:73:39:4b:2f:02:64:96:c2:d0:
         68:de:ef:f4:3b:e0:64:1b:9b:77:47:29:8e:14:be:c5:90:f1:
         08:13:04:b0:2d:36:72:62:3d:0d:47:7b:e1:d3:a6:3e:85:08:
         f4:ba:05:10:52:5c:40:08:e5:9e:ea:56:e5:e5:80:cc:3e:ac:
         cc:d4:a2:4a:ca:2c:35:75:b7:f4:7f:0a:15:18:e8:a4:32:e4:
         bc:27:8d:1e:f3:87:ed:cc:03:84:35:f8:9e:4d:09:32:17:6c:
         86:35:8a:56:31:da:3c:26:36:6d:7d:8b:51:32:61:4e:32:d4:
         39:51:97:47:3a:4e:d2:81:6b:36:49:9c:d9:d0:67:3d:95:9a:
         c1:c4:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:09:44 2025 by rpki-client