Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
File:                     1c66c136-216a-334e-9397-93f9ed1f75ca.roa (raw, json)
Hash identifier:          qIZkJDWXK/M1cgrh19EhwbqR+dqEjpiO8y+Zqq+3FLE=
Subject key identifier:   9D:B8:4E:9C:A2:29:41:9E:EA:76:CF:54:18:90:57:F8:27:F6:0B:A8
Certificate issuer:       /CN=31d2846b-36c4-41a9-86c2-a98e92bef162
Certificate serial:       010D0C9F4328584B21CC3FEB8FA6B4730C026280
Authority key identifier: D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     398757
IP address blocks:        2620:0:630::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:3f:eb:8f:a6:b4:73:0c:02:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2846b-36c4-41a9-86c2-a98e92bef162
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=d0b8a724-a345-4a51-854b-eb6a01ccb89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f4:ba:de:9d:92:d1:a9:70:c7:07:21:f2:ed:
                    b3:4c:7d:68:32:4b:74:9c:f5:c4:91:13:c8:58:27:
                    34:e2:76:89:53:37:6b:a6:7e:41:a9:52:02:fb:32:
                    33:f8:2a:a3:b9:9c:c3:59:e8:80:08:81:6b:c6:a3:
                    82:53:5a:f3:54:47:32:01:28:70:51:69:2b:85:82:
                    d7:bb:38:61:ab:3e:1c:2c:62:77:c3:ce:4e:02:cf:
                    7b:32:ea:5a:e7:c1:9b:86:11:59:fa:51:f4:51:f1:
                    cd:1d:84:37:aa:1f:ea:68:df:85:b6:91:f3:ef:22:
                    d6:2d:13:47:e9:9f:b0:e9:e9:f8:54:5f:c5:53:e2:
                    f7:35:56:f7:bd:9a:d2:b9:81:55:78:47:95:c8:d6:
                    5e:e7:ff:38:cd:4f:8d:58:85:c7:73:71:7e:9c:bf:
                    b5:52:dc:33:69:f2:5e:5b:7d:64:bf:bb:ca:d4:40:
                    2a:3b:8b:b8:3b:2c:30:66:bb:bb:9a:32:d5:bf:2c:
                    91:4c:06:f8:a0:d9:3f:bf:e9:d5:d9:e9:c0:f6:9c:
                    c2:a7:73:54:fd:d0:2c:36:20:c2:44:64:c7:63:09:
                    5c:c5:b7:e2:8d:04:53:69:14:4b:20:31:f8:55:67:
                    b7:88:78:6e:94:de:d2:a9:58:b5:bb:13:b1:18:75:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B8:4E:9C:A2:29:41:9E:EA:76:CF:54:18:90:57:F8:27:F6:0B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl

            X509v3 Authority Key Identifier:
                keyid:D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:630::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:ab:1a:17:36:04:14:1c:92:8e:c9:b8:dd:48:19:88:7a:
         dc:0a:85:bc:02:75:cb:c3:ba:0b:02:71:85:ce:62:b6:66:7e:
         66:b1:c9:f1:6e:73:63:bf:f5:c2:31:3a:c6:c2:9f:2f:e3:98:
         2a:e6:a4:c5:5d:19:cb:b4:12:bb:bc:dd:88:60:07:ca:0c:0f:
         50:69:ec:2a:55:c7:c3:53:1e:88:19:41:6f:98:0d:b5:39:b5:
         7f:19:cc:be:cb:2a:9d:2d:46:e5:e1:ab:0e:db:0b:27:05:e0:
         4b:48:30:a4:a4:c2:98:78:ef:e1:67:44:ef:8b:79:d3:03:af:
         34:fe:84:18:6b:03:6a:13:e9:7c:9d:c3:e2:7a:f2:6e:ae:4e:
         51:a5:f3:df:7a:b7:21:7f:03:74:58:52:3f:10:9a:14:19:c0:
         c1:2f:99:15:46:61:24:0d:f5:65:69:a2:78:37:73:78:5b:15:
         f5:6a:12:1a:cc:12:8c:fa:2e:60:cb:93:13:77:ce:e9:79:4e:
         ef:a9:2f:64:10:e1:33:4b:8f:72:43:1b:e8:58:22:66:54:2a:
         ca:2b:38:f4:01:59:c6:0c:a0:a5:47:13:f8:95:34:46:1e:3d:
         d4:5e:34:29:39:ec:ab:1a:42:6c:1c:31:f5:94:fe:58:2e:02:
         ac:ea:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:07:00 2025 by rpki-client