Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          Yg9aVSmHc0wbhv+lt0B/s6vdVBokQcWbxVHUIz8rFsQ=
Subject key identifier:   78:9F:5E:F8:98:F9:9B:94:13:D0:D9:2E:3C:8E:5D:69:48:A3:69:1A
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F4328584A9FFBA2FC4B82115B884F4E80
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a2:fc:4b:82:11:5b:88:4f:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=7e2972b2-0342-4ab1-8edf-d23621f571ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:46:ea:79:17:0f:04:ae:00:42:cc:ed:2d:
                    7b:50:55:fe:8e:93:05:5a:64:5b:66:27:08:94:93:
                    bb:4e:56:8c:1d:0d:52:e8:2a:0f:a0:86:5f:71:ab:
                    86:0b:90:ca:90:e2:05:74:8e:e9:0a:0c:44:c7:97:
                    2f:81:75:f4:8e:8f:23:9d:4a:ff:a0:ab:df:68:ac:
                    f8:44:67:94:63:64:ea:47:10:b5:c2:be:7d:fb:63:
                    ac:58:3c:74:8c:d8:0f:0a:0d:e4:4c:a6:cc:55:81:
                    06:14:6f:40:06:23:cd:69:f4:ec:73:ab:04:5a:72:
                    9e:87:36:10:62:61:dd:3f:3f:2e:c2:ec:40:4f:24:
                    80:3f:8c:ca:de:a1:26:8c:a7:f4:41:8b:6e:3c:c7:
                    10:f2:42:b2:62:ab:14:1c:29:48:7a:d6:3b:61:05:
                    c8:f6:13:2b:46:0d:58:aa:6a:d9:ca:26:74:ae:9d:
                    bc:28:0c:3f:f7:c4:32:f0:e4:25:4d:60:a0:10:51:
                    ca:93:d8:9f:56:f9:d3:83:66:14:8f:8b:dc:aa:35:
                    28:5e:10:96:5a:6b:e0:e0:a4:b0:28:f9:79:11:cb:
                    2b:2f:a8:2b:63:98:ca:95:30:18:92:88:0a:6f:77:
                    d2:3b:3f:f6:ee:27:76:5a:96:e3:ea:d6:9d:70:e5:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:5E:F8:98:F9:9B:94:13:D0:D9:2E:3C:8E:5D:69:48:A3:69:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:75:5b:a8:cb:70:3c:a4:5f:2e:08:65:3a:e8:32:1b:25:a8:
         34:f8:ac:43:b0:5a:04:14:06:51:b0:a3:6c:7e:3b:97:90:c1:
         fb:cb:1b:42:b3:db:5c:3d:0a:40:38:6a:86:9e:70:a3:78:6b:
         13:55:ad:c6:bd:9d:43:f3:f7:b7:a1:2b:c4:4a:52:a0:af:f9:
         d8:c9:d0:33:9c:ca:88:8a:d7:ce:64:2f:95:57:29:0c:18:b8:
         fa:62:a9:c7:88:79:a2:00:75:04:e0:2b:fc:f0:7c:a0:71:0e:
         57:e4:44:59:ce:7f:82:6a:aa:e6:ac:e6:c1:ae:7c:d1:3d:e0:
         2d:1a:f2:3a:63:69:54:21:92:31:22:4d:98:80:e0:5f:2c:35:
         1a:90:86:e7:84:7e:54:e8:4f:d1:0e:35:c3:cb:e4:93:26:e5:
         79:e6:ed:cd:2a:47:5f:ad:38:a5:5e:fa:92:95:ee:24:04:81:
         40:3e:11:9d:e9:2d:ad:bb:33:ac:81:d4:bd:03:d1:69:81:37:
         f1:92:0c:f0:e8:e7:84:71:4d:6a:5f:c1:e3:3b:ea:26:47:2d:
         1d:e9:8f:15:ad:5a:b1:a4:2c:51:c8:98:23:e2:35:0e:a3:01:
         c0:b2:e3:23:2b:b3:cf:4a:c7:b7:01:c5:02:a5:10:38:2c:8c:
         47:29:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:08 2025 by rpki-client