Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
File:                     066aa71d-ecb5-3507-ab13-9e0344c68899.roa (raw, json)
Hash identifier:          mgJhx4R2aI3B0q/rpEiKM0zJQFcTqc7D4Gio5lKpfCs=
Subject key identifier:   F7:23:57:24:50:D3:EB:47:F4:59:8A:2B:75:0F:F4:27:D6:CB:22:4A
Certificate issuer:       /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
Certificate serial:       010D0C9F4328584B41E70E77C494C14A80AA9D80
Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     20381
IP address blocks:        2620:0:2b10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0e:77:c4:94:c1:4a:80:aa:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=d480a2e1-1011-425c-8aaf-a1aca5e5a954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:d1:b1:c0:ff:5d:a7:bf:b1:8a:2f:5a:58:
                    10:80:e6:e4:eb:66:ae:85:66:7f:6a:b2:e9:95:1b:
                    a8:c8:93:a4:41:9e:ad:fc:29:b4:5e:ce:25:c8:22:
                    27:aa:60:3f:5b:3c:e1:b4:a5:51:62:9e:13:90:20:
                    f5:48:4a:26:a2:89:6d:e1:5f:e7:95:a0:39:6a:b9:
                    49:cb:31:e2:73:80:7a:b0:25:39:f1:24:43:9c:6d:
                    df:66:4d:95:3f:8b:79:35:4a:92:a4:f3:b6:a2:57:
                    28:49:4e:1d:fa:64:49:3e:bb:8d:96:15:88:42:27:
                    1f:5d:9b:66:f0:4a:ca:6d:09:00:f7:cc:02:ea:9f:
                    5a:f4:a5:8f:30:cb:6b:f8:ea:2d:f0:53:99:11:00:
                    4c:a4:92:2c:5b:96:fc:f2:ea:de:00:44:8b:57:69:
                    36:69:6f:16:cf:21:81:bf:03:0d:d7:dd:a2:6c:12:
                    97:cb:cb:ed:62:fc:b4:53:fd:62:e2:b8:16:b3:e1:
                    0d:74:37:7c:5a:89:b5:e9:11:b9:73:b6:a0:4c:0e:
                    ed:6e:ac:5d:1a:35:3c:dd:d4:bb:36:b7:b8:9b:95:
                    5e:7a:ce:61:0b:cf:68:71:54:af:a2:d4:1d:0e:c8:
                    55:3b:92:ba:9a:bd:5f:3c:c0:5d:9a:01:66:9d:70:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:57:24:50:D3:EB:47:F4:59:8A:2B:75:0F:F4:27:D6:CB:22:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2b10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:e1:9c:49:45:fe:20:27:9b:12:33:04:df:c6:cd:0b:5a:
         eb:f6:ea:ef:e0:1b:34:9f:24:57:09:cc:94:44:44:01:46:29:
         fe:e9:a4:23:bd:a8:27:3a:d6:5c:98:03:6f:81:b8:84:57:88:
         80:49:da:74:ac:88:f8:15:f7:1e:c1:59:36:a8:9f:da:09:15:
         ce:d1:cc:b1:20:eb:c5:8c:8e:f3:30:d9:0a:3e:64:ed:6e:80:
         df:56:9c:ed:6e:82:ff:12:4a:a1:01:15:8d:77:62:12:60:90:
         1a:e9:db:a5:c3:b4:72:03:f2:f4:94:58:b6:a9:37:b8:5e:7f:
         93:4b:40:bb:00:92:c6:7b:94:b4:31:c0:55:08:3f:0e:b7:15:
         bc:f5:02:f2:95:7d:57:c0:6b:f2:3d:ba:83:4b:74:29:88:16:
         5f:c2:d1:aa:94:45:7e:90:5e:6e:5b:b2:5c:88:b1:8e:84:9a:
         54:69:17:8b:b9:1c:5b:02:c5:a6:e7:a6:b5:0d:23:ef:54:09:
         84:bd:e2:dd:02:0c:fa:f0:85:11:41:f5:02:00:02:21:57:de:
         a4:77:13:f6:5c:11:25:e2:ce:aa:d9:38:b4:ec:4c:ba:e5:8e:
         aa:80:9d:28:ab:7b:b0:7c:eb:70:e6:1d:51:e9:42:d5:13:eb:
         79:1f:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:33 2025 by rpki-client