Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa
File:                     db278e47-2b3d-337e-8647-5202119e0fae.roa (raw, json)
Hash identifier:          8qiumtAM9SykUM9gM2fa4/0PWksGiiLZp9a0Zo+DKso=
Subject key identifier:   42:3F:70:D0:58:C5:16:7D:9A:B3:11:83:7C:55:BA:D6:85:83:F8:13
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584AB91B97EBB1301AE828CA99F0
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396982
IP address blocks:        2620:117:bfd0::/44 maxlen: 44
                          2620:117:bfe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:97:eb:b1:30:1a:e8:28:ca:99:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=5635003e-adc9-43fb-a866-624198135877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:7c:18:ef:3e:43:69:1a:b4:27:ae:9e:c2:
                    0d:e2:80:28:93:da:4a:f7:74:e6:47:63:82:b4:37:
                    12:1c:4c:e8:90:2c:01:d2:cb:88:12:c8:f2:07:6c:
                    f8:53:1c:16:b9:2e:22:56:e2:ff:00:8e:aa:d1:58:
                    74:3f:50:b0:5d:18:97:92:db:2a:f6:04:24:9d:c1:
                    90:c4:7e:e5:6d:4f:a9:03:fb:37:4d:01:73:f8:5a:
                    49:77:d8:3f:c1:26:2a:05:1a:75:e7:37:0f:ea:74:
                    a9:bd:c8:e5:3a:27:40:f0:31:51:b5:1e:6c:5f:34:
                    00:c0:72:a3:bd:e2:63:29:45:4b:a4:f1:46:eb:de:
                    45:87:10:10:fb:04:60:0b:68:da:c2:41:c1:4d:59:
                    e9:a0:a8:18:25:07:08:de:e3:d3:8a:4d:82:45:da:
                    86:b5:c0:c3:c2:e8:87:b2:b7:bf:7d:18:29:4d:8e:
                    42:eb:78:1c:ec:d6:43:e2:3a:5c:22:44:13:2e:38:
                    57:e2:76:d5:1e:ad:6c:49:59:a7:71:c9:10:23:f4:
                    61:45:f2:1e:1f:b7:ab:33:e7:ba:17:a4:04:4b:57:
                    70:e5:5b:cf:1f:a7:68:69:b5:46:a9:9f:a8:32:1b:
                    1c:07:69:3c:3c:c2:07:67:cd:d0:0f:ac:07:d6:ab:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:70:D0:58:C5:16:7D:9A:B3:11:83:7C:55:BA:D6:85:83:F8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/db278e47-2b3d-337e-8647-5202119e0fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfd0::-2620:117:bfef:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:f5:3c:fd:2a:dc:0f:f8:89:4f:e4:f6:9b:de:a2:75:26:
         50:b4:ed:81:6c:f3:f0:92:47:35:d1:5a:13:04:d8:e3:12:e9:
         1f:8f:be:a9:31:89:de:b6:d5:49:a8:a6:59:30:ac:02:3c:2c:
         f8:b9:d8:a4:ea:ad:a3:45:f3:8e:93:99:66:5c:d1:56:de:e9:
         72:94:27:a5:8d:a3:34:c2:6b:65:3b:10:87:de:7d:f2:d1:0b:
         0a:aa:04:4d:21:4e:5d:1c:21:34:ed:c9:d7:43:9b:b7:9d:d0:
         16:93:a4:aa:c0:50:e3:b9:5b:df:3f:c7:cd:a6:47:38:71:80:
         d6:b3:fd:5e:68:ee:bd:d3:a5:30:88:9a:bb:f1:38:8e:c8:68:
         d9:8c:89:9f:36:e6:d0:63:c3:df:f3:d0:b3:d3:f0:87:86:cc:
         79:ab:e5:4a:1e:68:14:65:a2:50:02:54:06:94:b1:32:28:3a:
         ed:19:b6:62:c3:47:7f:3c:74:2c:2f:fe:fe:86:4d:af:ed:df:
         83:98:35:ba:cc:df:67:63:11:15:fa:5f:df:fe:81:9d:11:fd:
         61:1e:72:7a:ba:0b:3b:70:a7:5e:b3:dc:ea:61:4c:52:48:f9:
         8c:2a:44:e1:ae:f1:2f:36:6d:c8:3d:ab:18:09:02:23:38:d1:
         87:39:fa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:28 2025 by rpki-client