Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
File:                     edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa (raw, json)
Hash identifier:          AFnenLUUh29RLJx6eX+RxPf/hoKzYZLTG6cuxJuE3VE=
Subject key identifier:   01:F2:10:52:ED:FC:D0:23:E8:D9:79:2D:98:5F:7D:01:2F:15:B7:5B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A841196A886F14F7BFABA3608
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        2620:15c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:96:a8:86:f1:4f:7b:fa:ba:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0a34f1d3-5bae-4789-83aa-ebce310cd24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:b2:5d:3e:30:2c:6e:ec:96:21:0c:91:16:
                    29:64:31:86:37:82:84:fb:9c:dc:02:99:89:cc:f7:
                    1f:17:24:00:0d:ab:53:a9:ea:d4:ec:b2:c6:36:56:
                    54:3a:c5:14:de:99:11:c2:09:3e:07:f9:70:02:92:
                    1a:7a:5e:a9:0f:4d:45:07:98:0d:65:08:16:1e:fe:
                    84:95:a6:76:a1:81:4e:b2:5a:5c:e5:f9:0d:6d:bf:
                    ca:2c:69:4a:9a:4f:28:d5:28:2c:b3:e3:48:59:37:
                    ff:79:49:cf:cc:21:ef:26:76:41:c2:81:0f:9f:c1:
                    82:be:a9:ad:ff:ab:63:9a:71:84:99:7f:60:a1:84:
                    3c:cb:25:02:00:f1:56:6b:4b:d6:06:a2:d1:2c:68:
                    86:e0:13:89:63:23:bd:68:03:7e:5b:62:a5:3b:50:
                    53:a7:f8:1a:9a:a4:7f:da:9d:38:c5:3e:d9:0b:5a:
                    a3:5f:4b:25:2e:68:17:88:7b:08:0c:14:58:98:31:
                    82:73:27:cc:eb:ee:03:b7:57:3f:8c:00:0b:81:81:
                    72:e7:1f:3c:77:6b:c5:b7:c1:51:45:59:a0:0b:82:
                    da:d0:24:bc:37:3a:51:14:e9:c1:79:ee:53:46:3d:
                    4a:eb:1d:3e:a3:87:5a:40:c2:7d:1f:ac:fa:3e:fc:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:10:52:ED:FC:D0:23:E8:D9:79:2D:98:5F:7D:01:2F:15:B7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:15c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:fe:01:72:4a:a0:97:28:42:56:ab:39:92:31:21:c2:8e:92:
         39:34:e2:b7:74:62:aa:46:85:d4:69:eb:cc:66:2d:b3:e2:a7:
         a0:17:4d:f4:62:93:c3:bd:26:ba:d9:89:f8:a0:c5:bd:3a:41:
         51:0d:09:2d:a2:c3:ea:03:31:cb:03:9d:d6:77:8f:e1:b9:db:
         16:c4:b6:50:36:8a:5b:f1:57:0e:79:75:06:85:b0:a1:d3:30:
         8f:2b:e9:5b:39:31:54:4e:de:e8:89:64:8f:00:7d:17:9f:a7:
         c6:62:51:95:6e:7e:12:c5:6c:3a:6c:d1:f1:ed:b3:0a:24:bc:
         f7:e5:72:12:6b:9a:8e:79:e9:fb:89:f6:88:24:b1:cc:cf:6c:
         c1:3b:e2:50:d9:28:97:ca:cf:a7:e5:40:6d:62:ea:8d:fe:5b:
         25:d1:f3:f1:e4:6b:df:16:9c:56:ae:64:09:31:76:bf:24:02:
         42:32:af:db:da:ac:89:91:dd:68:bb:4b:69:08:bd:3a:86:d8:
         26:89:c4:7d:f9:08:06:18:c1:72:5b:5e:15:95:40:b7:33:68:
         61:1b:fc:ba:e4:0d:7e:df:79:f1:7e:5f:0c:11:77:4b:d0:07:
         93:52:22:bb:bd:f4:37:fb:43:5e:35:12:f8:76:fd:e6:96:60:
         69:7b:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:57 2025 by rpki-client