Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/e55a97cf-b1c3-3545-9d7d-fb35e7c1cfdd.roa
File:                     e55a97cf-b1c3-3545-9d7d-fb35e7c1cfdd.roa (raw, json)
Hash identifier:          k6q81iZl3DdCu0fjhbj7sto9i72MiB4iH+lIUKxE0e0=
Subject key identifier:   DD:91:5C:36:64:89:2B:7D:AD:18:9D:E9:A0:9C:CC:61:FC:A2:3B:CD
Certificate issuer:       /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7
Certificate serial:       010D0C9F4328584AB650F9FBEB032CC6FBA5F200
Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/e55a97cf-b1c3-3545-9d7d-fb35e7c1cfdd.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     40343
IP address blocks:        2620:3d:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f9:fb:eb:03:2c:c6:fb:a5:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=f72bb679-525b-408c-8707-6e43476768cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:c7:42:9d:c0:ae:c6:e4:4a:80:c2:0d:c8:
                    17:5a:55:24:7e:fa:3f:c7:c6:3c:ee:da:9e:9c:51:
                    f0:5a:0c:e3:0c:6c:a5:58:45:ab:b4:45:8f:f3:b9:
                    2d:26:f0:3c:0e:26:ed:de:cb:8c:1b:7c:53:2e:c2:
                    0b:a6:58:7b:9e:37:aa:9d:ed:c6:1a:22:4d:fd:9e:
                    13:48:09:9c:d3:66:63:78:2d:62:93:e7:be:37:27:
                    b8:e1:97:27:d4:87:37:f7:43:8d:46:a6:fe:a6:f9:
                    e3:1e:7f:30:38:7b:bd:be:ac:4c:86:40:52:15:b7:
                    4c:a9:79:8f:4b:53:8c:59:6b:19:da:42:fd:1b:36:
                    ae:df:06:78:c2:57:89:85:be:99:79:b7:91:81:d2:
                    60:a9:36:8d:8d:b7:9b:a5:97:79:d0:24:be:4b:17:
                    60:c8:d5:c2:43:ab:3d:03:76:40:2e:e7:26:dc:77:
                    8c:da:8b:3c:f1:88:41:d1:c6:3a:e7:fa:e7:a4:8d:
                    d2:20:12:48:f5:0e:66:df:76:af:4e:ea:26:1d:8a:
                    2e:84:72:ea:31:84:b8:54:f7:dd:55:4e:d5:b0:a8:
                    e5:ff:70:f9:18:12:5e:8e:9f:6c:17:25:60:d6:f7:
                    f6:f8:07:6b:57:64:c4:7d:31:c8:78:52:a3:33:e7:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:5C:36:64:89:2B:7D:AD:18:9D:E9:A0:9C:CC:61:FC:A2:3B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/e55a97cf-b1c3-3545-9d7d-fb35e7c1cfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl

            X509v3 Authority Key Identifier:
                keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:3d:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:61:4d:8f:5a:a2:0b:70:f4:1d:ca:2c:fd:c3:ec:2f:17:
         4e:57:39:a5:83:18:7b:0b:84:60:ec:35:12:a9:d0:29:d2:99:
         fe:9a:28:41:15:af:1c:72:3f:c7:e4:2d:47:2f:db:19:1b:2c:
         18:43:26:56:04:90:49:29:93:19:91:12:d3:df:50:5d:c8:c5:
         68:10:3c:b2:4f:bc:60:72:16:29:81:70:c1:78:e6:1d:23:be:
         6e:b0:83:1c:ff:8a:5d:3c:de:af:cc:1a:48:f2:10:3c:92:98:
         8c:87:05:67:7d:d1:87:87:b0:d5:f0:d1:61:3d:9d:8b:96:46:
         da:04:aa:6c:9d:cf:be:5b:bf:43:89:74:29:9a:82:68:54:53:
         ab:07:76:3d:a2:81:39:d1:8c:cb:72:91:70:cb:aa:28:80:f7:
         c0:3f:df:d6:63:26:67:72:2a:86:22:08:df:2d:72:59:4c:6b:
         19:87:1d:3c:54:c3:e0:b2:36:da:30:2b:50:be:da:6f:21:de:
         f5:81:72:1a:f5:ed:9b:0d:cc:ea:33:9e:ad:a5:96:68:37:61:
         dc:7e:87:90:87:43:e4:03:ec:e6:5a:0d:1c:81:70:6b:51:bd:
         58:bc:06:94:30:f4:b1:8d:60:76:e7:7d:2d:84:7b:9c:4c:7b:
         33:fe:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:37 2025 by rpki-client