Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
File:                     3054e161-067e-3d75-9c80-741ae64f0f71.roa (raw, json)
Hash identifier:          UIMzdNGe8X3iO5v8E54/HofPWzK8ewaDMPjDCqBxUIc=
Subject key identifier:   1B:FE:CF:2F:FF:ED:10:1C:FC:4F:5F:60:C1:00:E3:2A:93:A3:F1:36
Certificate issuer:       /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
Certificate serial:       010D0C9F4328584AA85BBBACC3D104A59083AC85
Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     46641
IP address blocks:        2620:13:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bb:ac:c3:d1:04:a5:90:83:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=bab1b831-ce99-428f-8386-1bd9daaac170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:d9:1b:c1:e5:1f:c6:f2:57:99:99:7b:4c:
                    50:61:62:29:3f:42:34:04:dc:fb:fa:de:f8:a6:9e:
                    f7:9f:69:e1:67:53:ea:20:4e:4a:ac:67:4c:2d:9d:
                    0a:47:4f:67:4f:11:b8:4f:6a:96:cd:5e:14:15:b6:
                    40:c5:c0:00:96:99:f0:2f:51:fc:19:e0:83:38:f0:
                    67:fb:6b:b2:67:20:45:85:f4:3c:b8:2a:99:85:2d:
                    50:45:15:9d:b8:02:cc:8d:e6:bb:d8:e9:83:27:e1:
                    c2:98:12:54:a1:8d:5f:ca:e0:49:0c:8f:f7:2a:dd:
                    e7:9e:58:a7:88:48:23:fe:d9:1b:95:1d:48:b2:5f:
                    33:7d:eb:1d:f6:0e:f5:49:9f:25:85:e0:2f:50:a1:
                    d2:80:48:37:3d:8e:13:11:00:dc:90:bf:f1:8f:4c:
                    d6:5c:ba:59:d0:6e:46:82:45:b1:a8:c4:8a:fa:b3:
                    50:20:a8:c8:ed:88:a5:25:07:2d:86:a4:e2:37:f6:
                    30:77:b9:6d:f2:3a:3a:e5:94:45:9a:c5:cc:db:fa:
                    2b:46:cc:20:2d:93:2c:5a:fc:61:6e:85:41:70:c0:
                    ba:ba:35:7a:42:f2:e0:3b:74:c3:9a:0e:09:03:c0:
                    92:45:1d:7c:7e:fe:44:57:18:7e:eb:38:1a:05:79:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FE:CF:2F:FF:ED:10:1C:FC:4F:5F:60:C1:00:E3:2A:93:A3:F1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl

            X509v3 Authority Key Identifier:
                keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:06:60:e1:73:bb:98:19:a9:b3:03:f0:83:c4:12:09:8c:
         bc:47:a6:e3:ea:b6:20:57:73:e6:e7:ca:8b:61:fd:ad:9b:a0:
         cd:a3:9c:70:8b:86:7a:10:55:3d:62:ee:ab:fc:b8:b8:07:ba:
         81:ff:2f:4e:df:8e:95:6b:30:8b:d7:fb:0c:48:27:29:c8:8f:
         4e:7f:53:35:24:60:dd:f1:90:28:f8:36:15:46:54:ad:d3:69:
         6e:85:7d:1c:fc:89:ae:f2:8e:d6:2e:93:04:8d:33:ff:36:6e:
         3e:33:88:a3:25:8d:64:92:e3:16:a0:8a:a7:b8:b5:de:5a:75:
         c2:23:09:d7:82:be:98:32:05:d9:b5:9a:46:e3:b4:3b:d2:5d:
         32:01:92:a3:0d:80:5b:4b:ee:a8:48:83:59:1f:6b:a1:75:ea:
         6f:62:6a:80:1d:0a:33:4a:0e:09:4f:27:d7:05:b5:92:80:89:
         bb:8b:49:c3:0e:71:33:ae:bd:ec:7a:5c:73:64:99:9f:9a:5c:
         bc:fd:22:6a:8a:2d:4c:e0:c9:0a:2b:43:31:a8:0e:69:80:a6:
         99:9e:72:5f:28:70:ec:12:39:02:23:f3:32:e4:9d:e4:60:06:
         9c:98:bb:35:76:f6:ff:f2:7b:d2:d0:85:8a:20:1d:1e:ce:05:
         91:bf:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:19 2025 by rpki-client