Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa
File:                     bb04bac6-ee9f-3c56-997a-f79ab8206811.roa (raw, json)
Hash identifier:          xrYw6y7p0X4cEmMFVwir3Az4+MH11Nzp5me2Jf3QV14=
Subject key identifier:   49:E1:17:3E:31:24:CC:AD:19:8C:9B:28:0C:D0:21:9E:74:BD:00:CE
Certificate issuer:       /CN=63cb03c1-f0a2-433a-a000-2a90a9ecc4b8
Certificate serial:       010D0C9F4328584A814647A7599A92331BCFDA40
Authority key identifier: 7E:B7:22:0D:4B:75:6C:98:55:1B:C6:BE:49:1C:9F:B6:5E:D6:2D:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     399196
IP address blocks:        2620:8b:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:47:a7:59:9a:92:33:1b:cf:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cb03c1-f0a2-433a-a000-2a90a9ecc4b8
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=9c11d314-5710-41d4-9469-02e0037ce87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:00:9e:47:57:26:d0:5f:f7:34:b3:54:0c:
                    14:34:f4:42:b2:9d:ed:a1:a0:1b:3e:ce:8b:de:61:
                    09:21:4b:99:4b:88:e1:67:ca:1c:60:ea:d5:91:24:
                    bc:ef:b6:b2:b9:7d:fb:3a:af:80:41:1b:7e:35:fb:
                    63:9a:59:65:d8:f6:c8:c3:08:36:06:1c:fa:87:df:
                    80:fc:ec:06:85:1a:02:44:69:94:99:95:bb:73:48:
                    d5:f9:67:1d:05:78:5e:c3:3c:d3:b2:5d:b2:eb:33:
                    fe:ec:2d:f1:f8:df:77:8e:a5:6c:c6:46:2a:f8:ce:
                    33:c7:ad:e3:21:a1:5e:29:03:c0:f9:46:10:94:cc:
                    42:b0:d8:d7:0f:00:9d:ce:75:c8:33:97:15:b0:d6:
                    9b:b1:b9:7f:e8:fa:0b:df:87:10:b7:67:0e:61:29:
                    38:0f:b2:7a:a2:54:5b:3f:1e:de:de:41:94:f7:85:
                    89:22:f4:64:f8:b8:85:d2:be:c5:7b:50:16:64:b8:
                    7f:e7:20:76:e2:01:a3:75:e6:5a:d3:42:86:9a:0c:
                    67:aa:a1:b4:8c:87:ce:d1:18:ad:64:e7:10:99:13:
                    30:96:54:d4:2a:09:47:a8:60:56:59:e7:49:ea:80:
                    be:d8:2f:7c:88:f7:96:bc:90:47:7b:a7:0d:b0:b2:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E1:17:3E:31:24:CC:AD:19:8C:9B:28:0C:D0:21:9E:74:BD:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/bb04bac6-ee9f-3c56-997a-f79ab8206811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.crl

            X509v3 Authority Key Identifier:
                keyid:7E:B7:22:0D:4B:75:6C:98:55:1B:C6:BE:49:1C:9F:B6:5E:D6:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63cb03c1-f0a2-433a-a000-2a90a9ecc4b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8b:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:c8:69:4f:bd:24:7d:3c:e9:6a:d5:e6:4f:fb:86:48:ad:
         2c:e4:a0:97:d7:71:f5:ea:45:73:77:ab:9d:f5:3e:78:02:44:
         9e:e8:39:88:70:55:af:5e:b4:16:44:72:d3:75:27:8d:f5:87:
         39:f9:d3:53:f6:cb:f4:a0:e9:86:70:5e:df:48:62:e7:81:b7:
         f6:0b:e2:93:cc:1d:ac:ac:b4:e3:9b:f2:77:4a:43:e9:10:a0:
         d3:f4:ab:84:2a:e3:67:71:3e:46:3e:e0:67:bb:93:b2:ab:3c:
         3e:69:41:bc:cf:59:f7:85:90:81:98:96:f9:c7:c6:ac:4d:09:
         72:32:9f:b9:b3:4b:a4:d1:e7:7a:69:f3:aa:5d:a0:ae:a3:c5:
         32:91:3f:8a:39:e3:14:dc:98:07:17:1f:bd:b4:33:eb:81:82:
         ff:71:45:a6:ba:3c:bb:2b:1d:35:6f:ee:56:eb:06:6f:66:fb:
         48:9b:99:92:0e:4d:33:79:e1:c4:51:5d:44:34:34:43:d5:c9:
         ed:95:b7:fd:e1:08:89:34:f2:3a:a3:ac:80:c7:d1:e5:7e:22:
         1e:9d:d1:73:c2:c8:ac:ab:4f:12:33:06:2d:62:fd:d7:4e:89:
         7f:b0:9f:1c:46:1a:e7:00:e0:ba:a8:9a:f2:bb:36:d8:5d:f8:
         7b:3c:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:16 2025 by rpki-client