Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa
File:                     5f5b76ef-f608-3cee-b705-a728d08d89c0.roa (raw, json)
Hash identifier:          a1XUW01CMB5wPvPKT4/bxVKzmET0pytAb5jXs1G6MSs=
Subject key identifier:   C9:63:44:B7:A5:73:FA:E0:56:BB:B2:93:BC:DB:FA:84:C6:45:FC:31
Certificate issuer:       /CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
Certificate serial:       010D0C9F4328584A5B95B305B614637FC90C4700
Authority key identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2620:c3:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:b3:05:b6:14:63:7f:c9:0c:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=c161d2ed-7dbc-4d4b-89fd-7bde1aa0d723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:55:48:1d:1e:b1:bc:7f:ef:d3:64:f4:a3:
                    21:06:9a:ac:c5:17:ac:e6:e8:07:91:b7:9b:ee:7d:
                    e9:24:e6:57:bf:96:95:b7:42:c9:cf:93:87:d7:df:
                    fc:fb:f4:a2:a5:2b:44:30:63:51:00:1f:7b:16:6b:
                    58:49:25:e0:86:48:ac:64:22:71:e8:79:f8:53:29:
                    54:7f:8d:06:a7:5e:59:57:eb:45:95:e3:7b:6b:cd:
                    eb:3d:03:f6:84:3f:4f:44:3a:76:6a:2c:17:39:20:
                    35:37:c2:44:b6:fc:aa:4f:be:f7:39:cc:c5:07:29:
                    79:12:d4:cd:0b:e5:e7:95:2b:3d:2a:5a:69:d3:52:
                    bd:f2:23:a8:5f:21:25:57:5d:cc:80:37:0a:2e:83:
                    e8:e7:99:c4:ea:df:32:a4:81:c1:52:c1:d0:0f:fd:
                    44:0a:d8:94:c1:7f:3f:08:22:aa:c8:ea:de:0d:7a:
                    c5:a0:46:3c:3e:be:dc:4b:0c:ad:d8:4c:e6:de:d6:
                    8c:d1:23:b8:78:4e:8e:59:19:63:0e:f6:35:e2:69:
                    a4:fb:67:71:22:ad:0e:a8:c5:32:c3:65:d2:aa:eb:
                    03:c7:fb:de:b0:76:24:04:fa:f2:0d:0d:cc:d2:17:
                    21:f6:f5:c3:61:95:3f:22:e2:ba:36:60:4c:44:27:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:44:B7:A5:73:FA:E0:56:BB:B2:93:BC:DB:FA:84:C6:45:FC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl

            X509v3 Authority Key Identifier:
                keyid:49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2a:81:4d:75:b9:da:44:2e:55:46:de:ae:55:1e:4f:f9:8a:
         f8:b4:f1:63:8d:d6:61:6b:ee:d1:58:a9:61:f1:16:bd:3f:18:
         6f:fd:bd:7a:63:6a:4c:ed:b6:9a:28:b1:73:0b:81:54:e8:80:
         f0:d8:6d:06:d6:82:f7:18:57:cd:9d:d9:f5:e3:c1:a1:31:23:
         8c:97:ca:63:0a:d9:c4:37:2f:fa:a9:18:18:8f:c7:9d:41:81:
         cb:48:66:5e:27:e5:5e:a9:ec:ba:35:09:a8:13:2f:0a:dc:f1:
         73:b9:8a:99:d7:13:1f:5d:2f:d5:ba:46:aa:9a:f8:69:1b:bf:
         fe:dd:39:44:e3:5b:0e:4a:e3:e2:f4:d8:7b:b8:e7:2c:c8:60:
         29:4d:3b:3b:4f:91:ff:49:41:48:94:c6:3b:e8:0b:a7:f2:7a:
         d0:5a:df:e4:4f:3a:b0:2f:1d:1c:e4:6a:f1:85:4c:0c:e9:2c:
         27:f4:5d:aa:2f:52:a2:e7:60:ad:42:94:28:63:0c:a4:26:64:
         c4:86:43:6d:02:91:12:68:4f:7c:eb:73:10:c7:fc:fe:b6:0a:
         0e:74:8f:56:93:68:6b:4f:26:13:ca:36:72:ed:59:5b:2b:6b:
         8a:ae:01:a2:08:cb:aa:83:23:52:a4:e8:2e:00:59:03:de:5c:
         a4:5f:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:34 2025 by rpki-client