Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/afac442d-a724-3fbf-92e9-8a7c7f479c09.roa
File:                     afac442d-a724-3fbf-92e9-8a7c7f479c09.roa (raw, json)
Hash identifier:          e34Xvzgi/dcgwHGhCYEChfkCcXF98bpcbIZGnYHcehg=
Subject key identifier:   9A:D7:43:76:C6:BC:4E:D4:59:96:55:5F:5E:39:FE:7B:29:26:B8:01
Certificate issuer:       /CN=6386797e-8108-4714-b6ad-7cb4ef6666d7
Certificate serial:       010D0C9F4328584A9D30E48BC4F8AECA971D31E0
Authority key identifier: EF:74:67:08:01:DE:E0:99:7C:54:63:41:71:EB:10:4E:95:57:DE:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/afac442d-a724-3fbf-92e9-8a7c7f479c09.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     13331
IP address blocks:        2620:11c:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/6386797e-8108-4714-b6ad-7cb4ef6666d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/6386797e-8108-4714-b6ad-7cb4ef6666d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e4:8b:c4:f8:ae:ca:97:1d:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6386797e-8108-4714-b6ad-7cb4ef6666d7
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=9e0f2012-b670-4092-a118-538670ce380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:aa:28:64:f1:a8:61:b1:49:8c:67:71:f9:
                    c5:1a:9d:23:49:cf:36:d8:fc:25:85:bf:33:7d:47:
                    f1:87:a3:4b:26:c9:18:78:75:2e:d0:af:25:aa:11:
                    58:ca:85:13:d3:4e:2a:ae:14:af:4f:25:2b:e2:47:
                    cb:a5:c3:db:77:1d:1b:e3:10:d9:3f:de:e1:8f:ba:
                    57:d5:fb:70:3d:66:ea:ab:a4:4c:5d:b0:fd:b5:38:
                    45:98:94:1c:1b:74:f9:8a:d4:62:38:5f:53:80:a2:
                    46:e3:12:0b:0a:c4:92:09:5f:57:c4:b2:5f:2b:32:
                    10:67:88:28:d6:a0:61:ba:6e:c1:ba:4a:ef:a9:5a:
                    36:1a:b6:9c:90:c5:09:72:1b:0e:72:c9:da:b6:09:
                    f8:0a:1a:80:a7:20:a0:1d:44:54:83:66:e5:ad:2f:
                    b0:26:bc:74:b7:39:85:1d:d4:4a:32:7d:71:a1:51:
                    6b:e4:a4:67:0c:c3:ec:74:fc:28:5c:8d:a3:4a:63:
                    d9:c4:93:60:c2:68:25:64:f1:5b:4a:8e:c7:ec:1c:
                    59:35:08:6b:db:90:c1:ba:ed:21:de:25:dd:b2:c3:
                    25:c0:89:79:7e:4b:41:86:c0:41:bd:51:63:6e:77:
                    94:a3:33:41:ae:33:bb:b0:76:ee:04:87:19:38:84:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:43:76:C6:BC:4E:D4:59:96:55:5F:5E:39:FE:7B:29:26:B8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/afac442d-a724-3fbf-92e9-8a7c7f479c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7/6386797e-8108-4714-b6ad-7cb4ef6666d7.crl

            X509v3 Authority Key Identifier:
                keyid:EF:74:67:08:01:DE:E0:99:7C:54:63:41:71:EB:10:4E:95:57:DE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6386797e-8108-4714-b6ad-7cb4ef6666d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11c:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:3d:1e:35:8a:c2:62:67:42:cb:d8:4d:2b:53:ac:0c:3d:
         30:bd:a3:3a:bc:d3:9a:45:bc:f1:93:b7:fd:a3:af:91:97:f0:
         b1:f3:c9:e5:14:11:10:da:b5:7d:4f:f4:26:6c:0d:ab:55:6a:
         eb:1e:ea:66:2c:38:de:bf:da:f6:35:67:98:93:dc:5c:d1:3e:
         73:f2:e9:a3:b8:0e:2d:b7:9b:98:87:65:70:8d:90:98:a4:20:
         bd:ce:08:cd:ed:48:73:32:6d:1e:39:8c:c4:38:29:5e:0f:66:
         13:1c:26:8c:79:0d:59:cc:5f:9e:e1:c9:12:83:19:bb:63:34:
         59:d9:9f:f9:65:c9:c4:6a:5f:95:d6:89:1b:49:1c:ea:47:51:
         dc:db:dd:15:47:cc:9e:cd:21:08:e6:c7:f6:55:77:98:72:be:
         dd:49:b7:bc:77:70:e2:29:bd:64:b3:7e:bf:ef:9d:34:32:1b:
         bd:e9:1a:5c:e5:21:d1:28:da:3d:87:da:89:3e:d1:ac:ac:15:
         56:6f:10:c2:4f:83:5f:cf:bd:4f:b8:a5:97:3a:fc:4e:85:09:
         63:fe:c1:3a:81:e5:f1:c9:4e:2f:42:47:d5:01:8f:aa:ca:fb:
         3b:19:cb:d3:45:ad:f6:c3:39:4d:d1:33:3b:a9:e7:45:3d:30:
         2f:51:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:27 2025 by rpki-client