Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
File:                     1d978fb0-4997-3482-a154-82257478e02d.roa (raw, json)
Hash identifier:          wp9KL4bifXQDQaKw4dxo3TDXadNfEedZNvxve+EqGe8=
Subject key identifier:   72:EC:60:6A:74:22:8D:B5:84:A5:00:8C:33:30:9A:C5:65:CC:8E:0A
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584B41E7155F9127F787930B8540
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        2620:1b2:bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:15:5f:91:27:f7:87:93:0b:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=d556778d-2097-4b96-b1a0-193c6d3d9850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:03:18:d2:71:4c:0a:8a:3e:bf:f2:8c:2d:
                    7f:f8:8f:f1:06:c4:ba:0a:4d:61:b9:b5:3c:7e:6d:
                    35:5d:d9:21:f0:19:0d:72:b2:af:7a:bb:39:86:37:
                    35:95:64:14:3b:da:fb:c3:0e:ac:bf:c5:83:76:71:
                    b2:24:40:af:d0:4d:63:9d:2f:1a:2f:51:89:37:10:
                    ca:9c:5a:de:c2:af:51:da:99:d1:48:76:34:29:c1:
                    47:52:bc:e2:4b:13:2e:2e:8b:9e:2b:13:b1:b6:e6:
                    3e:fc:40:9b:7b:42:4c:f7:64:56:b5:a2:f2:b2:97:
                    4f:bc:c2:c7:7f:cc:7a:7d:2d:a9:7e:5b:14:ed:25:
                    fd:38:f6:00:6f:17:0b:a3:a3:8b:d8:82:2a:f4:81:
                    1a:03:ba:93:73:a2:46:77:b8:7d:46:c1:8b:a8:25:
                    53:47:e9:a5:b7:fc:aa:f8:40:1f:14:f4:94:c6:cc:
                    a5:a9:dd:84:09:d2:c0:e0:1b:ee:50:75:b5:19:9b:
                    07:cd:1b:f5:83:9a:1c:8c:2a:74:64:2d:20:73:10:
                    34:47:19:b8:d1:3b:70:0c:72:33:cd:1e:87:50:86:
                    31:20:40:23:14:d7:61:3c:47:20:da:9a:fa:e1:11:
                    51:1a:e3:29:88:d4:4c:f7:40:fe:36:52:42:a8:22:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:60:6A:74:22:8D:B5:84:A5:00:8C:33:30:9A:C5:65:CC:8E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:e5:0f:02:7b:ba:90:59:2a:20:0e:ab:ba:84:7a:27:30:
         4a:af:96:f6:be:c4:90:6d:06:f8:d0:1e:ed:ee:f8:d6:db:4d:
         f1:02:8e:0f:b1:c3:8b:b0:a2:c0:51:e9:61:8b:20:90:f9:34:
         54:5f:18:7f:42:b4:b5:84:e6:3e:a4:ab:bf:18:4c:7a:5c:6b:
         bc:12:4b:b8:d5:c0:d3:2f:f4:e5:0f:45:0c:ca:fd:8c:b3:3f:
         0b:db:ba:c1:a5:12:65:17:13:d6:b9:22:34:ed:e7:3c:58:87:
         ab:81:31:0b:b9:63:25:10:b8:de:f8:b6:e5:89:fc:81:d3:40:
         3a:8e:03:ea:ac:eb:eb:a9:03:7d:79:da:08:07:8e:c5:f0:15:
         88:4d:e0:c8:d6:3b:94:67:a9:f0:36:f8:b4:9d:b2:8a:58:3f:
         7e:44:19:f5:1b:8d:6a:4b:51:80:f5:86:6c:6f:50:c0:be:ec:
         77:e0:6a:c7:28:07:6c:1d:c4:55:72:de:29:d1:2f:7f:30:11:
         44:f4:da:58:62:a3:07:0c:93:9b:96:d0:d0:1e:da:44:49:84:
         f4:db:9b:2c:57:9f:47:50:4a:2e:64:5d:1e:cd:2a:98:d8:ca:
         de:f7:dd:7d:f0:2f:62:8d:b8:dd:8f:e3:7c:74:e0:0f:c2:49:
         84:86:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:53 2025 by rpki-client