Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/1e1cb12e-6215-3b04-8f6a-01ed531c3058.roa
File:                     1e1cb12e-6215-3b04-8f6a-01ed531c3058.roa (raw, json)
Hash identifier:          mJZlABQ8XMMniHp88a6bGYM7qLxfP7UqB6F0EYc+zAY=
Subject key identifier:   AC:2A:8B:01:70:78:5A:A2:A7:16:D9:B4:5C:38:B5:03:9D:47:64:8C
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584AD3343E91B3A62E57E7159840
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/1e1cb12e-6215-3b04-8f6a-01ed531c3058.roa
Signing time:             Mon 11 Aug 2025 21:21:35 +0000
ROA not before:           Mon 11 Aug 2025 21:21:35 +0000
ROA not after:            Sun 09 Nov 2025 22:21:35 +0000
asID:                     8103
IP address blocks:        2001:520:1020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:34:3e:91:b3:a6:2e:57:e7:15:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Aug 11 21:21:35 2025 GMT
            Not After : Nov  9 22:21:35 2025 GMT
        Subject: CN=87c148b9-db44-486b-926d-f719ec03cfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:1b:f7:04:0d:d2:ba:20:fa:6c:8e:f5:97:
                    39:45:ba:f2:2f:b4:c0:ce:4c:2e:a7:c2:a1:2d:80:
                    0c:7f:ee:57:a9:07:b7:ab:5a:52:5b:d0:06:16:0d:
                    c8:13:98:bf:ca:05:1e:a8:67:c6:b6:f7:d3:79:0d:
                    d2:a6:ef:67:5c:94:64:3f:e6:5e:11:7f:61:07:32:
                    ad:5a:3c:0f:ed:99:63:b7:ba:2b:11:88:63:b9:59:
                    83:f7:92:c4:e6:1e:03:49:33:8a:cc:d9:59:14:b0:
                    ea:bf:99:e7:bc:37:2b:bb:f3:d4:86:14:ae:92:98:
                    89:83:1f:f1:bb:00:1b:a4:28:08:16:89:a0:ff:82:
                    e5:26:0c:8c:a4:13:42:08:b8:c3:a7:fd:4d:21:b6:
                    ec:ae:17:65:6c:68:8c:11:76:04:0a:d4:14:9d:ea:
                    67:5d:6d:0f:76:7a:3c:fa:ff:77:65:eb:b5:75:83:
                    57:f5:4c:65:c9:aa:cb:86:15:c5:57:6d:1f:cf:bd:
                    ad:39:90:fc:8e:13:87:27:41:1e:a9:b0:dc:05:cb:
                    c3:23:53:e6:32:e8:19:74:83:c8:76:96:23:2e:b9:
                    74:54:90:6e:ba:d8:66:b6:1c:82:6d:86:15:8c:21:
                    f1:2b:b1:dd:cd:b6:37:8b:8d:e6:d0:70:80:c5:34:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2A:8B:01:70:78:5A:A2:A7:16:D9:B4:5C:38:B5:03:9D:47:64:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/1e1cb12e-6215-3b04-8f6a-01ed531c3058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:1020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:e2:c8:aa:87:be:fb:69:9b:c9:b7:d2:74:e5:9a:a0:f6:
         c8:61:b5:e3:76:75:99:ed:f6:16:96:49:50:cc:f4:f1:c0:af:
         99:02:62:51:db:57:44:4e:32:75:5e:86:67:c3:e0:a4:d3:dd:
         72:6e:9c:e1:c3:e3:32:da:45:b0:85:47:37:d9:43:93:08:7e:
         ec:0a:c6:0e:e4:5c:b6:23:76:80:74:90:82:7a:07:96:b2:ea:
         27:34:d4:7a:21:3e:a4:29:64:93:78:84:fd:7c:50:a1:10:e0:
         81:db:90:7d:35:e2:0d:27:d5:90:79:01:e2:86:a6:35:a3:76:
         97:f1:32:47:ca:5c:18:1b:05:93:4a:5b:ed:21:1c:83:54:12:
         f5:e5:3a:31:ad:80:e4:40:2d:09:73:54:e4:b5:98:43:ed:5a:
         f4:4e:9d:f9:4b:e0:c5:4d:6a:55:7a:3f:65:d7:d8:81:f6:09:
         7b:eb:79:db:00:0b:53:ca:bb:89:b7:53:4a:84:02:98:9a:21:
         9d:e2:c4:f4:84:6e:d9:2e:d3:ff:67:e6:72:78:45:2f:24:82:
         90:a9:13:77:c9:f9:a4:a5:7d:22:9a:1d:67:d2:12:aa:3b:5d:
         b1:05:1f:1b:b7:fb:89:17:cc:57:50:bf:df:2a:c1:ea:3d:ae:
         79:69:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:36:53 2025 by rpki-client