Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa
File:                     16febd85-1078-3b32-9b95-c4e634d036cb.roa (raw, json)
Hash identifier:          rooWbTMkAZ/4qr1VmV45QxxvEhD1I8OcZK22Miv2goQ=
Subject key identifier:   53:7E:5D:89:7E:F9:54:7F:29:59:85:36:E1:C3:5C:15:0E:A6:A3:13
Certificate issuer:       /CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
Certificate serial:       010D0C9F4328584AAB26582ADFA5D6067CCAC200
Authority key identifier: 48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     6082
IP address blocks:        2606:4c00::/33 maxlen: 48
                          2620:121:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:58:2a:df:a5:d6:06:7c:ca:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=19024890-5822-419f-b67d-812a3de521c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:12:3e:69:71:6c:22:75:07:aa:d1:85:21:
                    8c:98:98:d7:32:3a:71:df:1c:b3:22:c5:cd:ed:0f:
                    54:9d:bc:59:e7:5e:0c:b9:29:eb:69:34:f0:be:8c:
                    eb:33:5b:4f:e7:38:bc:57:81:74:24:3b:41:32:a9:
                    2b:46:09:18:e0:8c:6e:96:98:2e:d5:3c:66:01:78:
                    3c:88:ea:e5:24:4d:cb:59:f2:e3:38:f6:49:8c:ae:
                    fe:e6:ef:3e:ef:78:50:16:19:f2:78:b3:28:fa:a2:
                    03:8d:b9:e4:de:d7:92:71:ae:c4:5d:3e:8e:5b:be:
                    f7:f3:f3:d9:c1:40:3c:fc:2f:45:02:2c:08:cd:7a:
                    0d:fe:5c:77:f1:0b:09:e1:5c:eb:46:0c:7a:bb:64:
                    b7:cc:f2:59:eb:1c:32:33:95:8b:0c:2d:ae:d7:da:
                    74:0a:e7:ca:8b:06:eb:39:17:a1:12:b7:f8:ec:94:
                    42:e4:61:09:05:f3:4d:18:2a:50:39:3e:df:03:22:
                    ca:26:c1:ce:4a:03:67:15:6b:2f:92:61:15:1b:77:
                    70:a1:d5:fb:52:69:36:e4:af:ce:a1:49:d2:cd:41:
                    a6:9f:5d:16:a1:75:cd:55:30:a0:e1:e4:ec:b2:f6:
                    50:a4:b0:74:cf:19:d0:26:95:b8:aa:95:2e:58:07:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7E:5D:89:7E:F9:54:7F:29:59:85:36:E1:C3:5C:15:0E:A6:A3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/16febd85-1078-3b32-9b95-c4e634d036cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.crl

            X509v3 Authority Key Identifier:
                keyid:48:20:B7:A3:62:19:15:ED:7E:42:BF:64:41:93:4F:4C:CC:EE:CF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0f65cc61-2b4a-4f48-ae5d-28366aa2dcb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4c00::/33
                  2620:121:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:43:da:83:76:ab:29:91:b9:d7:13:b8:0a:34:61:37:a4:
         11:a9:f6:b8:1e:b2:bd:0c:22:ba:58:fb:fa:f1:5f:56:a2:dc:
         70:68:45:b2:37:f0:35:6e:6a:b5:86:e6:a0:f5:5f:63:e8:3f:
         99:fd:a9:de:3e:8e:62:75:46:d8:cf:ad:79:82:55:0e:7e:3c:
         56:43:07:6d:38:38:65:d7:f7:0f:8e:cc:c0:26:9d:6b:03:1f:
         f8:1a:76:69:81:c5:85:be:4c:9f:51:a0:50:b3:6e:50:70:13:
         6b:2b:f1:b7:06:b7:61:ab:4a:92:63:ea:5b:5b:10:a9:6a:b4:
         1f:5a:e6:ec:fb:c7:2c:0b:e1:66:ea:a6:40:3e:2b:a9:bf:69:
         89:ea:2b:d2:89:ed:dc:21:6c:7c:8b:bc:57:46:fd:ee:7c:64:
         73:82:64:06:ed:52:b8:f2:38:9e:39:df:0d:dd:a2:7b:3a:cd:
         a8:3f:90:21:4c:18:46:9d:f1:3f:9b:e3:d5:c0:8a:c0:d6:96:
         97:02:26:a1:a3:18:4b:8d:3a:7a:64:79:5c:86:9f:1a:9a:b4:
         be:1f:78:3a:c9:9f:a8:f8:87:ea:9b:c3:77:4f:9f:45:ea:bf:
         12:95:41:23:53:21:74:20:83:65:06:bf:b5:8d:ca:b2:0f:3b:
         ea:6d:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:36 2025 by rpki-client