Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa
File:                     2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa (raw, json)
Hash identifier:          dZ26C2R6GwYC3LN9tlkC0Pu8+33tQLLHqjuU55VyUZo=
Subject key identifier:   93:4F:58:24:A8:95:4F:56:76:D8:48:1A:3A:C8:46:8C:46:16:AA:CA
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584AD33557FB2C9BE46507F17200
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa
Signing time:             Mon 11 Aug 2025 21:23:48 +0000
ROA not before:           Mon 11 Aug 2025 21:23:48 +0000
ROA not after:            Sun 09 Nov 2025 22:23:48 +0000
asID:                     8103
IP address blocks:        2001:520:5031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:35:57:fb:2c:9b:e4:65:07:f1:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Aug 11 21:23:48 2025 GMT
            Not After : Nov  9 22:23:48 2025 GMT
        Subject: CN=8b75d36b-68e1-4a68-99d8-47ed14062409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:f3:12:e2:b7:52:b9:f2:14:9f:36:fb:a1:
                    72:7e:a8:c1:35:28:23:f8:6e:71:cb:cc:9f:19:22:
                    9d:ab:a4:92:e1:13:59:de:89:d1:68:eb:46:aa:86:
                    69:9e:2a:53:0e:e0:75:d6:a6:59:8b:96:22:55:56:
                    f5:c5:71:c4:b1:36:a6:4b:56:df:af:4d:a8:60:5e:
                    92:99:34:9f:8e:5a:c8:d3:f5:5a:40:09:34:b0:ff:
                    22:bb:a8:3f:dc:82:86:50:e6:93:4f:bd:26:4f:a3:
                    ad:d8:bd:d1:f7:87:b5:4a:0d:1f:aa:0f:63:f9:9d:
                    3f:e7:76:3d:49:36:5d:c3:fa:56:b3:25:e1:38:f1:
                    aa:15:5b:d6:b4:d8:66:ae:28:00:8d:00:67:bf:a3:
                    07:8a:08:25:a9:36:6f:80:3b:37:44:56:5e:c7:c8:
                    72:93:71:37:f2:e5:b5:9c:69:b3:c0:28:d2:29:6d:
                    ab:f8:5e:33:2b:4c:73:08:fc:0b:d6:ba:e6:61:15:
                    88:04:3b:67:0e:51:01:80:53:42:d6:83:cf:c6:4d:
                    03:6f:48:a7:8a:d0:8a:8b:79:e3:29:e9:e3:2e:72:
                    3e:76:7f:7d:52:c6:b9:44:3d:00:4a:48:d1:b1:ee:
                    5c:64:24:25:84:c7:cf:58:94:16:f7:c9:a8:e6:c8:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:58:24:A8:95:4F:56:76:D8:48:1A:3A:C8:46:8C:46:16:AA:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:5031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:47:ba:b0:88:41:c5:4a:18:34:d0:ed:b7:0d:b9:1d:b8:6f:
         28:d6:c0:34:45:6e:c3:67:ce:d6:1f:f2:8c:77:20:2c:08:a7:
         a6:82:23:f8:64:3a:03:e0:4a:81:52:94:b8:84:7c:56:22:4f:
         1d:b2:83:d7:58:67:b1:78:81:bb:c4:51:50:c9:f4:43:ed:d2:
         60:91:39:e8:6e:09:70:0d:45:07:3b:7e:2e:59:0b:0c:18:87:
         c7:cd:30:e6:76:ea:64:05:25:47:7d:18:f2:96:71:cb:70:5a:
         7e:0d:fe:ce:fa:dd:10:a3:9e:0b:f4:b0:00:b8:8c:20:46:ec:
         d2:14:c6:b1:df:a1:72:48:32:54:fb:3b:a2:08:62:1a:61:26:
         58:07:55:60:19:07:c7:e4:81:6e:50:2e:53:56:6b:54:62:84:
         9e:3a:78:ec:97:c8:4d:bb:9c:39:38:6b:86:8f:a0:89:5d:de:
         1c:60:12:16:90:2d:58:91:40:9f:44:29:34:79:dd:cb:1c:35:
         eb:ea:6f:0a:eb:be:e1:64:f3:5b:2b:85:98:cd:bd:04:8a:e8:
         3f:85:32:56:ed:86:77:bc:3f:58:3c:39:60:57:39:38:fa:44:
         e2:92:ba:fb:ac:4f:0d:be:8c:06:90:46:85:f1:9e:e8:0d:d3:
         e9:d7:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:53:32 2025 by rpki-client