Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa
File:                     9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa (raw, json)
Hash identifier:          ENwEz8tUqO/eO5Be1JlI+cCdfSEwKAT2ChAaL9XwpxA=
Subject key identifier:   00:CF:35:B6:DD:9A:86:11:1D:F2:43:65:86:8A:45:ED:DA:6E:7D:57
Certificate issuer:       /CN=19345e58-ac00-4d42-ad61-73928068f7c9
Certificate serial:       010D0C9F4328584A3BFFF67F12B8E8D3AAAC3380
Authority key identifier: E0:68:79:1E:C0:28:31:B4:A4:D2:73:82:BA:D3:56:17:20:8B:A4:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa
Signing time:             Wed 18 Jun 2025 17:29:11 +0000
ROA not before:           Wed 18 Jun 2025 17:29:11 +0000
ROA not after:            Tue 16 Sep 2025 17:29:11 +0000
asID:                     16796
IP address blocks:        2620:2:4000::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:ff:f6:7f:12:b8:e8:d3:aa:ac:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19345e58-ac00-4d42-ad61-73928068f7c9
        Validity
            Not Before: Jun 18 17:29:11 2025 GMT
            Not After : Sep 16 17:29:11 2025 GMT
        Subject: CN=06450e46-c05a-4b9a-bb11-a51fc2925983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:a8:9e:f8:dc:63:72:02:d7:46:a4:2e:27:
                    1c:92:46:4f:f5:11:95:08:7d:4b:34:78:2f:cb:04:
                    2c:a6:3f:45:58:6b:36:a7:2d:c0:b2:ad:f4:70:48:
                    ed:ae:6d:f3:32:9a:7b:9c:ef:3f:a0:50:95:73:40:
                    98:55:e7:02:23:56:e5:5b:63:14:54:18:d0:61:72:
                    78:f2:25:70:e3:1b:7a:44:3c:d6:52:04:81:da:e2:
                    f9:a2:3e:eb:c9:e5:da:27:32:ba:54:74:a1:61:4b:
                    7c:88:0b:4f:33:0b:4b:f7:56:9c:33:52:95:b2:23:
                    3c:d1:dd:7d:b9:0c:ac:c6:eb:8f:51:0b:11:2b:e8:
                    33:ce:0c:e6:e7:86:7f:4e:b4:5b:ba:11:a7:69:dc:
                    13:a4:fa:50:9b:79:60:b1:70:bd:df:d6:e3:ab:d7:
                    a1:dd:6b:b7:d9:19:9d:00:b1:a0:78:3d:3a:e8:bc:
                    cd:7a:a4:7d:79:b8:0c:73:a3:71:4d:ee:68:18:41:
                    c3:6c:77:89:96:38:d6:95:8f:8b:60:59:80:ab:b6:
                    fd:20:bd:51:92:4f:69:7e:e2:3d:02:d9:8d:b5:d4:
                    ff:f3:17:38:94:c4:16:dc:40:84:dd:3e:62:ca:1b:
                    eb:ee:95:95:cc:e6:fc:3f:ed:50:25:00:dc:b8:fd:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CF:35:B6:DD:9A:86:11:1D:F2:43:65:86:8A:45:ED:DA:6E:7D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.crl

            X509v3 Authority Key Identifier:
                keyid:E0:68:79:1E:C0:28:31:B4:A4:D2:73:82:BA:D3:56:17:20:8B:A4:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:55:cf:e1:97:7d:ef:95:27:3a:6f:c7:a0:f7:29:e3:e6:7b:
         ff:c3:b0:a1:de:95:3e:75:19:55:1a:cb:83:dc:37:b2:60:9d:
         3c:f9:50:3c:a2:29:05:58:73:e8:1d:03:1c:f3:34:c5:84:92:
         56:2e:0e:9b:9a:ee:e8:c4:38:f2:76:24:a5:a9:e4:3d:97:cf:
         4f:7b:08:f0:eb:c4:1c:da:86:82:13:0e:aa:88:47:d8:89:ba:
         7e:72:a5:b4:69:15:f8:9f:42:27:8d:c6:b5:21:41:f1:bf:82:
         56:9d:3a:80:5e:7c:88:18:f4:f0:c0:e1:dc:9b:98:7b:ff:83:
         54:2e:91:63:a4:75:1c:3a:de:1e:83:e5:74:e0:2e:64:8a:83:
         7a:2b:d7:16:df:00:5c:bb:5c:0c:fa:2d:b7:e0:51:55:0e:b3:
         19:c4:8f:ed:7b:35:dc:3a:64:53:cc:e9:10:39:f4:2a:01:a8:
         6a:73:49:99:bb:43:d2:fd:26:f2:ca:72:22:7d:44:72:b1:98:
         08:73:7e:3a:d8:3d:73:ce:6b:f0:35:44:cd:54:67:4a:f1:89:
         81:42:65:d7:1e:bd:e6:c5:06:d7:50:69:9e:7b:1f:36:6a:7e:
         4e:56:72:ff:11:2f:df:be:cb:79:20:0d:dc:bc:6c:3e:0d:d3:
         40:3d:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:29 2025 by rpki-client