Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
File:                     b69de0d6-eab7-3ae4-930c-75753b86626f.roa (raw, json)
Hash identifier:          6gknr4cXQLspAwqXDbEFdj6NL5H01A68T2mzEBr8b6o=
Subject key identifier:   C9:1C:59:AB:CC:AA:0C:7C:A7:CD:4C:25:CD:7C:F2:1A:8C:86:7C:CE
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584A9FFB9D967ADC44F45A465E00
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     55091
IP address blocks:        2620:115:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9d:96:7a:dc:44:f4:5a:46:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=c8dde5f9-2158-45b8-9013-84903b5ec7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:f1:96:b5:f1:61:72:ab:a7:f0:6f:2f:2a:
                    96:f8:a4:79:73:0c:45:35:b2:6c:44:0a:94:e5:df:
                    98:cf:e3:cd:b6:68:7b:11:3f:75:89:e1:44:77:77:
                    08:8c:64:3e:35:1b:6c:1a:11:83:16:12:f7:9d:a1:
                    32:db:e8:a8:ed:83:ba:a3:9f:a7:89:2a:3c:f2:1a:
                    1d:57:83:c2:ba:5c:81:3d:2a:af:4b:d8:d3:ac:bc:
                    06:eb:f4:b7:da:85:64:b4:72:14:84:ed:ef:8d:67:
                    d4:ab:fa:ba:cd:09:fc:d0:74:aa:25:cb:7f:4f:67:
                    f5:da:ea:db:b8:ea:65:13:f8:dd:83:b4:cf:02:b9:
                    6f:2e:8b:06:80:3a:01:02:86:ce:d8:67:9b:07:cf:
                    af:03:ef:61:09:ee:35:46:e8:cb:67:bf:71:7b:ed:
                    82:4e:10:1d:51:bb:fa:06:af:0e:aa:98:94:cf:6f:
                    8c:36:51:9a:d4:cb:83:7f:d4:bf:da:2c:ae:2f:63:
                    75:51:76:65:d1:c4:b0:9d:46:78:a4:f6:cf:57:b8:
                    ed:ec:24:ac:86:6a:e9:46:02:10:b9:57:d8:5e:42:
                    fb:1f:23:13:46:d3:35:32:38:7e:8c:11:95:fb:b6:
                    c4:0f:36:ab:f8:78:4a:35:69:22:5a:30:e2:da:74:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1C:59:AB:CC:AA:0C:7C:A7:CD:4C:25:CD:7C:F2:1A:8C:86:7C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:115:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:36:5a:a6:e0:8f:c0:a0:f1:42:f6:b0:3a:f9:c6:af:ab:
         a8:3e:13:df:f3:ac:ea:0a:00:ad:9c:e4:d4:3b:f0:04:fe:c1:
         36:1b:e9:06:a8:cf:29:e9:f2:35:c3:bb:6f:f8:0a:90:23:51:
         80:65:9d:ff:54:35:5c:2c:02:c6:b2:3a:26:04:44:5a:24:8e:
         31:a2:d5:34:3d:6e:39:4e:49:65:9c:0d:fb:84:c1:7a:09:b6:
         25:22:9d:a7:af:ec:a4:9b:ee:ce:ec:67:15:28:36:2d:eb:ed:
         89:34:ce:7d:cd:81:07:86:2c:cb:1b:d8:59:d9:bf:5e:2e:82:
         36:2b:88:e8:1e:8d:da:0b:aa:e0:42:cf:42:21:fd:3a:20:f4:
         a7:47:70:94:f1:4f:e6:5b:a8:c9:1e:a3:10:c1:66:e7:ed:34:
         c7:fe:64:31:cc:4a:73:48:c8:c3:77:b1:b6:49:9e:42:7e:21:
         b7:e6:54:56:d2:48:e4:db:78:3c:09:54:6d:95:cf:f4:1b:3e:
         f5:5c:da:55:ae:e1:0a:28:47:18:0c:33:87:93:2c:cb:50:86:
         16:6f:0e:f6:dc:54:68:35:1d:ef:97:37:63:2c:c2:ea:5a:42:
         a5:70:5e:33:20:37:bf:f7:c3:d0:1f:c6:14:65:09:29:d4:ce:
         4a:47:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:23:08 2025 by rpki-client