Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
File:                     a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa (raw, json)
Hash identifier:          cZmuldAhWIzVv32d2SRt7uz5SER8VM09sc78h/g1Xxw=
Subject key identifier:   2C:55:60:D2:8F:F0:8A:98:BF:02:F7:55:07:88:43:A9:60:25:95:DE
Certificate issuer:       /CN=cc16c3db-6181-4312-8911-054e81ccea5f
Certificate serial:       010D0C9F4328584A94D0D25B825F29D537DE7EAE
Authority key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     5719
IP address blocks:        2620:101::/46 maxlen: 46
                          2620:10d:1000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d2:5b:82:5f:29:d5:37:de:7e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=d3861bfb-c933-423b-8408-4d8b64895174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ce:e8:86:17:74:3e:55:aa:2a:96:70:c4:d6:
                    48:93:1b:93:ca:0e:48:76:ab:0f:ee:b7:6b:68:a1:
                    11:b4:35:0a:1f:67:6c:39:63:7a:af:81:ed:8a:f9:
                    9e:f1:16:08:84:f8:e7:b1:f3:b6:73:b3:e4:f1:98:
                    e5:13:46:e5:2a:52:45:c6:7f:1d:f6:8e:0c:15:86:
                    0a:b3:d6:e5:2b:04:ee:5b:70:e5:6a:e7:27:a2:f4:
                    44:9e:97:9a:23:ae:7e:94:86:a2:37:4e:35:98:a0:
                    10:d3:81:ca:1a:2f:02:07:7d:1d:7a:e0:3e:94:0e:
                    7a:e1:71:92:06:b1:5a:62:4f:a2:ec:b5:b1:ad:00:
                    86:5b:6d:5e:02:e4:33:88:17:b3:41:83:28:9f:db:
                    2b:d3:4e:11:70:06:b4:0d:58:ba:de:42:9f:c7:ca:
                    8c:ac:82:1b:42:2d:9d:e5:69:a0:5d:bc:2c:11:24:
                    69:bd:6b:a5:4c:2f:d4:af:15:7d:04:b2:a0:71:99:
                    d1:27:98:77:9b:04:a1:17:ce:a1:2b:7b:71:6a:af:
                    a4:64:50:c3:07:df:d0:46:9e:0f:34:9e:60:d9:d5:
                    07:f5:21:a1:94:15:f5:75:29:56:dc:ac:d1:af:4d:
                    e8:24:48:00:e7:10:aa:1d:aa:14:65:5b:84:ff:84:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:60:D2:8F:F0:8A:98:BF:02:F7:55:07:88:43:A9:60:25:95:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:59:31:d5:56:ed:7a:e7:c1:c0:74:6d:4e:f3:01:5e:72:
         63:7a:4b:86:3a:81:e5:36:1e:04:80:31:aa:63:b9:db:45:74:
         62:e4:d4:3f:7d:1e:fa:44:d8:e0:08:f8:27:d0:dc:a7:38:47:
         84:18:27:86:c8:3f:eb:b6:39:95:78:a2:cf:ac:de:92:a5:80:
         3f:4d:be:63:00:ab:11:61:66:c8:00:f3:9e:2f:4a:44:39:9e:
         24:52:b3:a5:97:51:19:da:f1:e1:a0:47:b8:41:5a:9f:8e:82:
         9a:9a:48:fc:42:38:82:67:ff:f2:8c:8b:4e:05:f2:3e:cd:3e:
         09:f4:c5:d6:f2:4e:ca:b1:fd:a6:af:8f:71:a9:e3:10:f8:78:
         24:cc:8a:d8:e4:b2:2d:7f:29:4d:c7:55:0e:38:04:dd:f1:2d:
         44:a6:33:27:89:19:48:f8:39:ef:12:0d:18:ce:f1:a7:43:88:
         4d:e9:79:0b:e7:b6:49:33:be:66:cf:21:22:f9:97:32:a5:39:
         57:02:90:71:33:2f:da:97:17:2c:ac:63:da:a1:9c:4d:cd:b4:
         c9:19:98:02:3b:d8:37:0f:2a:33:43:1f:b5:e8:17:8d:87:07:
         5a:d1:8a:37:34:3b:a6:51:5e:40:00:06:45:dd:1c:c0:40:a9:
         53:f7:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:40:11 2025 by rpki-client