Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa
File:                     c2f618e2-c66d-30c0-896e-b76c3e200421.roa (raw, json)
Hash identifier:          QvXMjIuvX8gMuWWpXOaYZkJsecYBoLnZyhSwB4Sm8Zc=
Subject key identifier:   11:64:D7:B0:71:49:EB:41:BE:F7:36:20:AD:02:A9:92:4D:ED:10:66
Certificate issuer:       /CN=69fd5aaa-164e-43f9-a8ca-302782d25019
Certificate serial:       010D0C9F4328584A9FFBA1C49925262B2FC7F900
Authority key identifier: B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     21837
IP address blocks:        2620:117:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a1:c4:99:25:26:2b:2f:c7:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd5aaa-164e-43f9-a8ca-302782d25019
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=77cf36bd-8362-4a0e-a484-096728a747f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:df:25:75:9f:72:67:9d:f6:29:3e:5c:8a:
                    0f:c4:80:76:a5:c6:bf:39:3f:cf:a9:9a:df:24:7a:
                    f4:51:0a:3b:60:89:93:bb:4a:a2:7d:28:f8:9a:f4:
                    43:bf:6a:32:00:8e:95:e9:a7:c4:5b:8e:86:29:b8:
                    f8:1b:5e:08:f2:19:f9:50:c6:4d:f0:c0:1c:e8:f7:
                    59:12:80:db:51:48:d8:64:8f:90:e9:f5:4d:08:84:
                    89:fb:52:12:ef:3a:97:95:a0:d5:c6:a0:fa:20:5c:
                    e5:c9:5f:52:a3:97:eb:8f:c1:3d:62:a2:cf:88:c0:
                    49:53:c2:b6:1f:7b:a8:9b:65:b7:42:ad:60:3e:1c:
                    9b:a7:d9:54:dc:a1:97:68:f2:12:ae:b9:16:a2:9c:
                    16:59:ba:29:90:d1:a8:a6:36:83:48:33:8e:5f:a9:
                    56:43:c1:75:b2:04:8a:fd:12:de:17:2e:3b:bc:73:
                    61:09:d2:8d:a6:18:f0:90:f6:a9:df:6d:e4:3d:c6:
                    92:e8:a5:ce:2d:f0:8d:ed:4a:55:ca:37:dd:fd:ca:
                    59:0c:39:46:2b:8d:9d:06:64:69:fc:ba:c5:1c:9a:
                    6f:b8:98:8f:bd:83:2b:0a:78:06:78:75:35:b1:11:
                    c2:af:8b:29:e2:38:f9:f2:76:e2:dc:bc:cd:22:bb:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:64:D7:B0:71:49:EB:41:BE:F7:36:20:AD:02:A9:92:4D:ED:10:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl

            X509v3 Authority Key Identifier:
                keyid:B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:e1:a3:c9:9a:37:ca:32:a4:dc:62:f9:0e:a8:b9:d8:8a:
         1e:d7:b6:4c:92:ad:c2:8b:33:cf:03:c0:ed:d5:81:73:51:1c:
         01:7a:14:c7:36:ad:5a:e7:af:01:4d:72:5f:b3:64:49:5e:a1:
         4e:2d:fe:93:87:ee:c1:69:7a:ee:83:e0:d5:ae:36:5e:72:c8:
         da:df:db:0f:2f:21:65:50:93:67:48:10:74:e4:40:07:3a:1e:
         5b:0c:dc:ee:d9:80:6c:d4:c7:1f:9c:d5:97:c5:96:be:60:d9:
         29:a3:5a:6e:dc:ee:06:30:d4:b4:41:c6:f0:89:a9:0d:37:c1:
         c0:84:e0:62:4c:c5:c0:a1:48:50:ed:39:0b:97:58:9c:56:44:
         72:d9:c6:79:66:62:6c:f7:59:97:ce:be:a8:13:87:53:0a:65:
         be:17:52:b8:b0:e0:1e:1c:8f:d8:56:da:0e:25:9a:21:60:ad:
         11:90:19:0e:2f:32:99:81:ef:50:81:88:f9:8f:1f:23:76:eb:
         e0:c9:51:9d:09:44:42:ce:8a:1b:fa:30:59:0b:c1:27:f1:7b:
         b7:d9:bd:df:7a:2e:c8:d3:25:cb:ec:94:f7:ea:c3:e9:02:d3:
         d7:a9:13:88:d2:92:59:41:7f:64:0d:9c:0d:76:9c:67:75:5f:
         92:7e:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:30 2025 by rpki-client