Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
File:                     d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa (raw, json)
Hash identifier:          jYA33qsmh/QKhBn7/oVAwqSlpGiQ2UrmViJutvcfqZM=
Subject key identifier:   D2:6D:27:3C:27:2F:5D:21:84:79:7A:13:2A:82:A2:28:2D:8D:E0:44
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584B41E71539A0BBB88AF7768F80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        2620:1b2:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:15:39:a0:bb:b8:8a:f7:76:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=181256f5-c882-419b-85ce-62935a555cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:0c:a3:ec:ec:8b:76:4d:ed:07:11:be:a6:
                    f5:a3:4a:b7:89:5b:53:41:6c:0b:74:3a:9b:ee:c7:
                    38:24:ee:07:eb:ca:54:ed:b9:5d:73:91:73:55:1e:
                    db:d2:4f:13:de:10:da:46:ee:0b:49:06:b8:73:11:
                    a2:b0:8d:c2:cf:3a:bd:77:b4:11:72:5c:5b:ca:31:
                    58:08:90:7c:9c:93:95:14:b8:15:9f:03:6e:b5:69:
                    0b:33:c2:3c:87:bb:98:95:1c:f7:51:52:24:19:e6:
                    39:bf:76:96:a4:ce:a0:19:0d:ff:e9:d1:fd:fe:fc:
                    2b:9f:45:51:8c:ce:ae:b0:48:0f:41:b2:91:44:f8:
                    c9:c7:bd:bf:aa:1a:ba:9c:10:11:ef:4b:b8:6d:99:
                    09:1d:65:2f:e1:a5:93:98:5b:26:28:2e:d9:5f:37:
                    b7:ab:09:5f:d0:ed:ec:7f:9c:d0:22:14:18:24:f1:
                    d7:eb:2c:7e:d4:d1:93:a1:9f:f8:15:3c:ea:bf:13:
                    8a:a0:2e:dd:0f:c0:f1:fe:ce:ae:a6:8c:f1:37:37:
                    a3:56:83:1c:97:da:66:f6:09:a1:98:99:8a:cf:05:
                    30:be:46:8a:df:21:01:57:1d:be:10:e5:96:29:9c:
                    30:cb:e1:e5:5c:3a:9e:c8:eb:20:cd:c5:4a:19:a7:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6D:27:3C:27:2F:5D:21:84:79:7A:13:2A:82:A2:28:2D:8D:E0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:9a:4d:4e:bf:19:85:3c:f2:e6:2f:39:67:59:04:37:36:
         39:bd:b2:96:5e:1c:2d:cd:c4:64:43:4f:ed:7f:f9:45:6e:ff:
         b0:dc:d4:67:04:6b:8b:de:b0:a7:2b:67:0b:f4:9e:6c:29:24:
         be:dd:be:2b:c7:9e:23:d8:77:04:b0:ad:03:88:96:2a:1b:57:
         d9:ba:0d:b7:c8:c8:82:f5:16:a2:73:76:54:d3:cf:8d:e0:a1:
         55:15:3f:83:bf:9b:5f:e4:45:bd:87:9d:23:a3:8f:f0:1c:4f:
         14:97:14:15:d0:4b:19:64:69:25:47:03:d0:2e:08:93:27:af:
         a5:f3:9f:a7:46:f1:bb:39:73:3d:50:54:51:c4:83:ac:51:80:
         0e:98:4e:08:3b:c7:2c:ca:03:b9:48:1b:09:db:b2:4d:9c:7f:
         d8:91:d2:e3:ec:bb:95:54:bd:31:7b:a9:d6:72:12:5f:bc:52:
         1a:b0:b7:95:da:c0:6b:b4:28:b2:65:04:7f:8c:d3:95:8b:b0:
         d8:45:e0:71:46:44:45:98:62:24:9c:f6:62:a9:52:cd:72:f0:
         48:7e:7c:76:49:1b:d5:5a:5b:32:b9:ae:ba:f7:e8:a7:05:52:
         49:32:9e:af:20:fc:54:08:c3:c7:2a:3d:8b:d4:ff:9d:18:7a:
         1a:93:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:36:03 2025 by rpki-client