Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa
File:                     59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa (raw, json)
Hash identifier:          s7JCdwe8M4L2Pc90CZFQ4sm3HG1Fw1j2YOiq6fCt6Lw=
Subject key identifier:   59:55:F6:E1:0B:BA:83:5E:95:D7:17:54:3B:09:F5:84:3D:D6:FA:86
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584BA39D204DCD2B5FDD74C4BF80
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        2620:113:8060::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:20:4d:cd:2b:5f:dd:74:c4:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=c17a124b-1f6b-42f4-9ad8-446785a06297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:be:15:e6:2e:1b:91:64:d0:07:af:87:c6:
                    b4:0e:e1:ed:94:49:d2:c3:08:a1:d3:4a:66:b2:97:
                    e9:b9:e6:b2:d1:76:7c:93:6f:ec:dc:93:52:4f:a1:
                    80:e4:30:f4:5c:c2:63:43:f9:46:71:b2:5b:2a:ce:
                    64:b7:b7:f8:16:6d:19:5a:18:7d:bd:7a:67:f9:87:
                    2e:f1:fa:83:55:77:aa:47:a2:1b:d5:cd:7e:3c:07:
                    71:7f:66:c1:4d:14:e1:d3:56:e5:3a:17:cd:9e:c5:
                    63:1d:c1:fd:82:47:8f:14:25:da:bc:6e:66:ea:6a:
                    fe:a7:b9:7a:3f:15:5b:43:2f:a1:50:ff:a7:b9:ac:
                    89:e2:cd:b9:82:23:6a:bb:54:97:08:3a:4c:20:bc:
                    ea:7c:19:fa:80:85:98:a7:85:f3:7b:f5:a2:47:60:
                    3b:51:a1:88:45:7d:4c:e0:fc:7d:af:98:06:cd:bf:
                    6e:7b:51:b0:56:be:ca:b1:89:63:91:5e:82:9b:6f:
                    0f:bb:2e:a8:16:77:19:aa:1e:51:2e:c2:46:7a:7c:
                    8d:32:20:dd:56:01:ae:b3:57:2e:dd:f5:1d:2a:61:
                    2e:62:46:31:ff:fc:94:f9:a8:53:a9:80:6f:bd:5e:
                    8b:32:f5:34:a2:b6:c5:ff:87:35:6a:61:09:12:94:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:F6:E1:0B:BA:83:5E:95:D7:17:54:3B:09:F5:84:3D:D6:FA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/59eb2d2c-7934-3c61-9b3f-5bb22f9ce8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:8060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:be:20:5e:56:d7:08:d5:b3:72:39:f8:59:f8:de:b8:b8:dd:
         8d:af:bd:c2:23:36:06:c7:e7:0d:f4:ee:da:60:26:fc:ee:2e:
         2d:f3:fc:22:c8:fe:8c:24:68:26:da:14:7d:52:3f:0f:95:85:
         50:53:2d:72:cf:12:97:cc:f4:e5:58:a3:75:03:58:19:78:dd:
         5d:03:1b:22:bb:0c:a2:ee:51:09:1b:12:55:56:60:f6:5a:d1:
         19:22:9d:d3:80:50:4b:85:24:90:5a:5c:63:55:13:ad:4e:93:
         b1:36:31:93:e2:08:30:fe:48:42:2f:fc:05:34:94:95:93:fb:
         53:e4:4f:a0:13:b8:65:26:53:50:e0:a1:39:e4:14:56:c8:de:
         0d:33:33:dd:85:4c:b1:e5:2a:d1:25:c9:1f:fc:3a:31:ab:1d:
         95:2d:73:85:43:dd:aa:24:f7:ca:ca:2b:7f:1d:81:81:d0:5f:
         5d:ff:b1:22:62:47:5b:44:15:06:56:4b:27:f8:e2:17:ee:47:
         ba:d1:c6:a6:78:ca:b3:0d:6e:7d:d8:79:1c:ff:c7:07:3c:f5:
         6d:95:d0:12:b1:d4:09:aa:08:c8:6b:e5:dd:5b:9e:da:1a:74:
         1b:48:c5:3f:88:4e:f6:45:fd:ba:39:fe:81:8e:42:aa:ec:c8:
         8b:4e:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:14 2025 by rpki-client