Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3d83cfc7-a4ed-3ccf-824a-c46d28c0893a.roa
File:                     3d83cfc7-a4ed-3ccf-824a-c46d28c0893a.roa (raw, json)
Hash identifier:          bOiKSLwppETGksgZemC4JQcklOD1C7U4zwxGy2sr5NI=
Subject key identifier:   E3:0D:0E:FF:84:34:91:D4:20:BD:57:96:11:ED:0A:4F:8C:44:0B:53
Certificate issuer:       /CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce
Certificate serial:       010D0C9F4328584AC4463FE16C1FAA273C5FE900
Authority key identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3d83cfc7-a4ed-3ccf-824a-c46d28c0893a.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     19173
IP address blocks:        2620:d2:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:3f:e1:6c:1f:aa:27:3c:5f:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=2f6b9793-77f6-4a13-86ea-dbb05b93da0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:e5:f5:90:85:06:c5:df:89:69:c3:a8:61:
                    02:8c:7f:65:58:52:6b:b5:80:5f:55:37:89:43:fb:
                    27:6f:5b:77:0d:82:85:84:4d:b8:33:33:ee:11:6c:
                    e2:3a:c3:88:bb:a2:52:af:44:5d:29:00:da:ee:d1:
                    33:6c:d8:a5:3b:e2:96:a7:06:f0:c3:c7:d5:5e:61:
                    5b:9f:02:09:b5:c2:d3:88:ca:f8:2e:35:df:fc:d7:
                    ed:e8:8d:30:de:6d:16:79:71:89:88:50:36:aa:58:
                    ba:14:c0:11:19:77:88:9b:1f:5c:b6:10:18:d6:d6:
                    89:9e:69:fb:27:eb:a3:3f:5d:6e:58:55:f6:18:fa:
                    94:f4:a6:7e:05:e6:c4:8e:f1:ec:3c:b2:80:f3:9f:
                    63:3b:d1:6a:f5:f1:3e:b4:1d:63:10:10:fd:c2:6d:
                    86:1a:e6:d3:be:a0:d2:f4:56:2c:0f:17:0f:71:8e:
                    51:15:44:c0:03:65:41:23:11:27:ec:44:f6:b9:b6:
                    35:87:88:5f:f1:59:1d:cc:a6:02:90:95:85:80:4b:
                    6f:f5:12:b2:d8:f5:f6:0b:a6:93:97:9a:3b:23:dc:
                    eb:dd:9c:35:00:0b:7f:75:89:7d:c6:3a:a1:ba:85:
                    4e:fa:9d:47:db:0e:6c:0d:ee:bf:b5:63:a4:22:5d:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:0E:FF:84:34:91:D4:20:BD:57:96:11:ED:0A:4F:8C:44:0B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/3d83cfc7-a4ed-3ccf-824a-c46d28c0893a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.crl

            X509v3 Authority Key Identifier:
                keyid:B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d2:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:05:7b:34:1c:ff:ee:74:d9:fb:4c:65:f3:80:72:d1:40:
         94:d3:76:e3:a3:a7:2b:53:15:37:71:14:cc:9b:2e:ce:c0:9b:
         83:d9:7a:e9:f2:d6:2f:30:f0:20:30:1c:53:e7:aa:36:a2:4f:
         f8:c7:57:c5:56:70:1e:8e:b4:1c:cf:51:c0:78:76:f5:f3:6f:
         9b:c4:55:d7:86:32:a1:05:2b:a2:0d:27:e2:75:bf:01:ae:f3:
         8c:e2:03:7a:07:56:bf:dc:71:43:87:fd:c9:2d:e4:7b:46:0d:
         bb:9d:b4:dc:5b:6c:1b:31:b9:14:d4:49:54:1b:e4:15:45:bc:
         30:ce:81:7c:18:c9:8b:70:ed:4a:c0:e0:cf:08:2b:28:af:dd:
         42:47:92:77:da:ae:e6:06:28:46:0b:9b:c7:c2:d8:92:a5:d1:
         5f:5f:9e:f1:a4:f5:7a:d8:f5:93:f5:3c:d6:02:62:fc:a9:53:
         9e:e4:d3:c3:e8:21:bd:0a:68:dd:93:92:2d:a6:89:a5:3b:a6:
         dd:4b:db:74:9c:0e:55:d8:81:3b:88:04:d9:3b:a6:71:73:f0:
         60:cf:77:7e:61:d1:83:e9:8a:93:5c:8f:3b:a5:45:9d:8c:c4:
         37:a5:34:63:6b:dd:65:ce:40:19:62:9d:5c:33:de:9e:b5:7a:
         9a:65:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:30 2025 by rpki-client