Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
File:                     912a4fa3-4f2a-367c-af73-91419fdd464c.roa (raw, json)
Hash identifier:          RmrCpYdsrVra7ODmIXBTs8+FyHdUK8zVC933wtgEKJM=
Subject key identifier:   58:96:BD:C3:95:81:52:CA:03:BB:DA:7B:19:71:61:02:58:E5:8C:34
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F4328584AA85BAF4A93B04E83A9F40B40
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     41690
IP address blocks:        2620:132:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:af:4a:93:b0:4e:83:a9:f4:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=b3a3b1a8-ec06-46ec-8f71-629e906c1c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:b6:34:82:9e:31:9a:ce:e4:0e:30:3c:8d:
                    0b:6f:59:59:b8:a5:21:82:66:58:53:8e:bc:7f:cc:
                    7e:2d:73:22:70:75:8e:97:8a:66:56:ee:67:3c:78:
                    32:89:60:51:7e:0e:bc:3b:fb:fb:f8:f4:45:fe:93:
                    2d:db:51:ae:3f:5c:3e:db:c0:e3:40:54:d3:08:35:
                    0e:dc:a4:15:75:06:54:cb:49:d1:42:15:13:54:ad:
                    15:82:c6:d0:5c:2e:2c:bc:02:60:9e:af:74:bf:66:
                    09:a6:8f:a7:95:37:f1:37:b8:22:6e:d7:1c:df:6b:
                    a5:53:98:bf:b2:25:f4:3a:44:4c:ea:14:3f:7f:41:
                    5d:d9:93:b2:e8:cf:0d:5f:81:af:a7:85:60:6b:47:
                    62:8a:ea:3b:5a:4f:a2:76:9a:12:49:5c:f4:02:c8:
                    0f:7a:51:ee:c3:09:e8:97:d4:ef:bc:cb:7f:b5:f1:
                    d7:39:d5:84:db:40:1b:1d:44:41:1f:b7:fb:55:6d:
                    29:9b:b8:ba:f9:ee:9d:ac:93:4d:37:fd:28:42:91:
                    17:65:c1:32:1d:64:78:89:54:4d:57:1f:b0:69:f1:
                    52:d0:1c:b9:70:da:5e:f3:f5:ff:f2:88:cb:92:19:
                    38:89:34:4b:c9:48:b4:6c:78:10:80:a0:82:f2:8b:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:BD:C3:95:81:52:CA:03:BB:DA:7B:19:71:61:02:58:E5:8C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:132:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:75:69:ee:14:b1:e4:0a:89:3f:5a:7f:2c:ac:8e:00:0e:
         41:c5:40:7e:2a:91:10:22:a8:3e:eb:f2:c0:fd:11:34:d9:2b:
         ec:d9:d4:73:52:cd:fa:d2:2b:07:bf:14:a5:6d:42:ab:16:ff:
         a7:5a:cf:3f:70:22:a4:f9:ed:81:f8:d2:bc:f2:de:98:b5:e2:
         15:d6:2d:03:5f:ed:fd:8a:ca:1b:b4:ad:b4:b4:a7:8b:6a:5f:
         5e:79:91:4d:c3:f8:6a:97:bb:8c:15:37:a2:c3:5d:a8:04:60:
         ba:6a:e4:98:62:7e:a1:e9:c4:97:68:5f:d7:40:11:8c:76:d6:
         5a:54:c9:6a:06:f6:56:a0:d3:f1:d0:d6:a1:0b:b5:0e:56:97:
         6a:87:64:e1:cf:5a:cd:d4:6b:f8:c2:49:6c:3b:54:30:4e:2f:
         95:d6:01:ab:f4:a2:92:04:65:66:31:40:ed:c7:3a:a2:2a:1c:
         2e:62:c1:aa:4b:a8:8d:d8:4b:35:b8:06:1f:19:ed:e7:c3:0e:
         b6:5b:db:42:0b:5f:44:84:e5:d8:79:c2:4a:74:70:3f:e6:5a:
         6f:77:a0:d7:41:eb:61:89:b0:0b:5f:d2:82:c5:a0:1e:66:77:
         5c:cf:d2:79:bd:7c:61:d6:5d:7e:da:f6:d8:5a:fa:77:4d:38:
         79:dc:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:42 2025 by rpki-client