Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
File:                     95dc919a-dcd4-36c2-b956-415e8edee518.roa (raw, json)
Hash identifier:          HPH5mibaZZ4B0zNzCncWLK5AK87aS4vBjKxQMRp5KDE=
Subject key identifier:   72:9B:6F:15:90:F2:19:41:D7:3E:F7:8E:6B:4D:62:71:AD:A1:5E:C6
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584A9FFB9EF6D9D9FDED24936580
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     17012
IP address blocks:        2620:110:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9e:f6:d9:d9:fd:ed:24:93:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=d9ec636d-f9f3-48bb-b390-56994a48060a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:53:6e:f3:67:49:5a:e1:ff:67:d9:a9:82:
                    84:31:fd:12:e7:94:c2:b6:f2:3c:81:92:4f:d3:eb:
                    12:d9:37:4d:57:fd:e4:ff:29:a9:93:b4:0f:3b:3c:
                    96:9a:19:93:6f:c4:3d:c9:2f:6c:08:dd:6c:7e:3d:
                    88:04:ee:8f:48:e2:da:88:e4:0d:f4:6a:91:89:b3:
                    3d:98:c3:15:75:af:28:f2:bb:60:d8:7f:a7:d5:db:
                    0e:45:0c:ff:fd:bc:91:c7:ef:d8:5d:1e:64:12:6c:
                    ee:6e:69:85:2e:f2:40:4a:42:9b:57:1d:e3:28:62:
                    56:3c:bf:d4:95:79:39:c8:34:95:e5:72:06:0b:74:
                    9c:b0:ed:91:f0:4f:c8:66:10:c5:0e:6d:5f:7d:5a:
                    9f:0c:9d:fe:2a:1b:72:f6:a8:5f:a9:62:e4:06:15:
                    75:92:17:52:16:33:94:be:d1:f7:be:13:5c:d6:aa:
                    33:1f:81:07:6d:ec:9a:08:08:b3:a0:14:c1:c6:d9:
                    6b:9e:3c:22:75:14:22:2d:8f:98:8a:fc:7d:65:39:
                    5c:29:36:2c:21:0c:79:cb:de:b9:9f:df:06:ea:21:
                    83:e5:cc:0e:ef:07:e5:60:2d:4d:f5:30:b9:39:98:
                    23:bd:fe:b1:4b:f7:a3:98:29:84:69:a9:61:37:9e:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9B:6F:15:90:F2:19:41:D7:3E:F7:8E:6B:4D:62:71:AD:A1:5E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:110:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:be:5d:dc:42:52:c7:14:8d:b1:12:2f:d7:56:7f:df:3b:
         7e:fb:cd:ba:dd:3f:e6:f4:88:80:11:06:6d:21:00:0c:4c:cf:
         cb:05:8a:1e:96:e0:69:c2:96:ed:ef:7b:55:df:27:1a:46:f0:
         8f:7d:cd:3a:d1:35:19:ee:20:0b:1b:60:33:27:fd:44:f8:cd:
         c8:87:08:0b:23:c2:07:eb:2f:71:22:62:42:4b:c8:9b:24:fd:
         80:7d:80:74:6b:a9:41:e6:69:43:b3:fa:ba:8f:a0:92:a3:f4:
         a3:08:0f:b0:86:fe:80:2d:4b:b4:c4:90:72:9c:6c:ae:2d:ac:
         13:df:ce:dd:d5:47:0c:2a:96:1e:03:02:8e:ed:8c:f6:4d:7d:
         07:6b:a0:8a:ec:8b:a3:0f:98:d2:f1:74:51:9f:98:20:07:2a:
         6f:1e:00:8f:5d:2a:a4:2e:ef:ac:5a:f5:41:4f:c1:f6:e3:f1:
         07:0e:db:6a:0f:c1:4e:b4:a6:37:90:37:63:2d:61:14:01:fe:
         b6:5e:e4:01:7a:50:c4:4b:56:89:5c:25:4c:c9:da:97:bf:58:
         a3:61:71:c1:94:81:84:e1:47:01:11:3a:18:08:cb:0a:83:b8:
         73:42:db:21:34:d2:31:31:11:70:d7:bf:65:ba:29:86:a3:08:
         59:bf:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:01 2025 by rpki-client