Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa
File:                     353cd56e-846c-3567-b16b-b7323fe728cd.roa (raw, json)
Hash identifier:          aoNjQyEnDrOiu93yWkkQ+B7FEjIpd+AtZl/CDewMK/k=
Subject key identifier:   08:65:A7:98:B5:1D:2F:34:66:FF:28:15:B8:60:8B:B6:7A:06:82:3C
Certificate issuer:       /CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67
Certificate serial:       010D0C9F4328584A9FFBA2D90A1B3A07117AD5C0
Authority key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     35960
IP address blocks:        2620:a1:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a2:d9:0a:1b:3a:07:11:7a:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=e225af16-3ed7-4cbe-880b-021ce9328ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:9e:9a:9d:c6:e3:4d:22:a5:a5:e1:d9:e9:
                    dc:58:c8:f9:c1:82:ec:55:f4:3e:a9:4d:53:db:17:
                    4b:9b:69:f5:ba:8e:3b:9f:bb:42:e5:64:b6:bc:cb:
                    0e:08:e7:28:73:17:a5:65:57:9d:3f:e6:46:e2:18:
                    35:42:e2:7e:7d:53:b4:5c:38:78:30:34:e2:c5:2d:
                    52:de:e8:b9:b9:de:f1:2a:b3:b2:01:f7:8c:42:85:
                    ce:d7:52:8b:7d:b3:b1:de:ba:6b:f8:cc:01:93:6b:
                    16:6f:78:f0:e5:45:7d:41:a3:68:f8:b7:31:83:cd:
                    ba:8f:af:18:84:65:93:b0:4f:53:b9:2d:65:1f:66:
                    72:b1:a8:09:82:ed:ca:aa:a7:ed:d5:f0:b0:b7:02:
                    4f:45:1e:b2:66:9e:34:36:f9:14:1c:4c:a7:f8:58:
                    a0:e6:35:9c:68:0c:2f:91:f1:22:04:50:9d:f7:df:
                    47:1c:70:13:f8:ba:83:b8:3a:51:bf:d5:12:c6:ff:
                    d7:47:95:71:fc:ae:f6:52:e8:b6:d8:20:ca:a7:a8:
                    d8:fb:fd:28:8f:a9:82:3c:24:1f:dd:f0:7c:84:88:
                    af:94:f3:2b:0d:31:8f:f4:31:56:46:c3:e9:1e:55:
                    47:b2:be:56:f5:61:86:dc:a7:06:8b:b2:34:69:b2:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:65:A7:98:B5:1D:2F:34:66:FF:28:15:B8:60:8B:B6:7A:06:82:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/353cd56e-846c-3567-b16b-b7323fe728cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl

            X509v3 Authority Key Identifier:
                keyid:6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a1:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:16:b1:27:77:e0:25:7d:35:28:bc:77:47:b0:e8:43:44:
         66:58:de:a7:eb:eb:6b:b6:d9:cb:84:b4:03:52:07:3e:36:1a:
         cb:90:1f:91:f4:06:c1:33:0d:69:71:1b:3e:19:d6:a6:04:38:
         39:2e:e1:21:1a:62:55:14:2f:e5:2a:28:de:0c:c6:41:79:06:
         6c:48:c4:4e:44:e2:da:37:6a:01:95:9c:8d:9b:9b:31:83:50:
         dc:8a:f2:3b:91:47:5b:0a:50:7f:db:12:65:f4:75:89:ca:eb:
         d4:c7:f8:fe:76:23:ab:f5:3c:1b:1b:ac:1c:65:ec:7f:d1:3f:
         72:74:53:6d:09:d8:91:94:ae:bd:8e:bb:db:f7:01:4b:61:e3:
         12:be:eb:26:00:b4:ff:62:90:5f:c5:be:f5:6b:e9:f4:01:47:
         48:69:99:a3:45:f0:0c:ae:5e:62:42:18:4d:7b:3c:2f:92:57:
         c8:65:72:9c:02:15:02:3d:ed:b4:8d:0f:9d:f7:1c:8c:c1:91:
         cc:32:8e:55:03:05:ca:37:c2:21:ff:46:12:1b:48:bf:97:85:
         a9:36:1d:28:be:a9:a9:7a:4f:e4:56:d2:25:98:c8:dd:fb:a4:
         20:22:f1:7a:82:ab:89:70:b1:9a:d0:09:e8:62:e6:65:09:9a:
         9b:9f:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:32:03 2025 by rpki-client