Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa
File:                     c817559c-60bc-373b-966f-49027ee8f1ab.roa (raw, json)
Hash identifier:          IJjR5k/xi4mhAizsJC9tBduWmRlwaK0vj4ZUI86UukU=
Subject key identifier:   96:A1:09:2F:98:B1:5A:F9:DB:52:52:88:BE:57:81:5E:83:80:0F:C6
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584ABD4B8F454A533D807E810B40
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     54282
IP address blocks:        2620:147::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8f:45:4a:53:3d:80:7e:81:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=ce09f5f2-4166-4aaf-b71d-882d50ca5326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:1c:21:40:1f:e8:29:e4:71:e0:c1:4a:7c:
                    4e:d2:9f:5a:bf:93:52:6a:f5:1a:68:60:5c:ff:30:
                    e6:b0:d1:71:a3:26:0c:59:ba:59:e3:6e:94:94:12:
                    c2:2a:4d:0b:94:d5:69:09:3c:3c:84:33:05:1c:a4:
                    57:a0:4d:27:91:37:aa:1d:b4:78:57:35:58:6b:e6:
                    bc:6c:7b:c9:ba:a5:79:96:f7:8d:96:e9:b0:e8:7b:
                    4b:53:c5:12:b0:be:67:2e:61:9a:2b:c6:a4:e3:6f:
                    ba:f3:02:7c:98:7c:4f:cc:99:43:bb:ea:bc:a2:ab:
                    75:1e:7c:39:56:b8:eb:36:41:22:80:25:b9:67:4b:
                    56:a5:62:c7:0d:34:62:b2:8e:d2:f5:c9:30:d6:a5:
                    89:2f:76:c1:c6:25:71:62:70:de:52:f8:c2:77:f8:
                    7c:17:e6:f7:1a:67:91:74:21:92:a0:1d:1f:8f:c8:
                    e8:b8:68:81:a1:d8:e6:86:5e:cc:d5:40:8e:d3:b7:
                    eb:0c:d0:fd:03:13:9f:f8:27:12:c5:62:11:59:51:
                    a9:00:5b:4b:89:6c:ea:cc:17:b7:b0:2a:c2:df:7f:
                    f2:cf:81:9b:0f:12:c2:97:09:8d:87:d3:c2:56:bb:
                    24:c3:51:50:64:f3:67:42:1b:51:14:9d:df:30:3e:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:09:2F:98:B1:5A:F9:DB:52:52:88:BE:57:81:5E:83:80:0F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c817559c-60bc-373b-966f-49027ee8f1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:22:f9:74:e9:a8:c9:c3:7d:57:2a:d9:46:8e:21:b2:c5:
         7f:21:48:0e:cd:57:56:cb:3a:59:9c:5e:c0:fa:c0:89:ce:13:
         01:7e:be:d9:0c:1b:11:26:df:84:e3:71:e1:af:16:af:2f:6f:
         5f:a6:9b:24:5f:1b:42:19:91:26:a2:48:0e:98:9b:d9:d8:80:
         6c:6b:0e:7e:88:34:cb:4f:77:74:a4:98:75:09:b0:43:44:2a:
         41:76:0b:ea:1d:36:30:52:70:c5:6a:55:6b:ac:36:11:e7:f6:
         d7:52:64:ee:19:fd:0b:e7:04:2c:e7:90:e1:d7:81:64:60:30:
         71:fc:02:20:ed:d3:bf:55:cd:fc:b2:f4:7c:56:47:7e:48:ab:
         01:13:dd:fe:6a:63:0b:3e:5d:69:b1:78:ec:f9:d5:63:fd:e5:
         49:fc:0e:48:a2:f4:0a:5e:ae:ea:61:9c:f6:ad:34:cc:9f:64:
         a0:bd:4c:95:e4:ec:b4:15:d2:d3:34:10:3f:dc:e8:d4:68:a1:
         5c:db:72:78:dd:8e:5f:57:14:67:82:8b:30:2e:a4:aa:15:d2:
         b8:f1:40:34:f6:19:8f:5a:d2:8b:5d:03:16:6c:1a:b6:4b:37:
         4c:6e:c7:83:2b:38:47:b6:8b:86:ae:2b:0a:c9:cd:cd:85:1c:
         e2:f8:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:13 2025 by rpki-client