Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
File:                     988aced6-b287-30c3-a924-fbe4e2213e00.roa (raw, json)
Hash identifier:          bChN6w8GY5y+ZKH0Ht+VFZtNwee7Dj2LD+V2uoG6h2k=
Subject key identifier:   54:19:E7:B3:C1:61:4F:74:FC:D2:ED:F5:64:2E:BF:7D:A9:BE:EC:E6
Certificate issuer:       /CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
Certificate serial:       010D0C9F4328584B99D7A03AB4E9E79366FA1500
Authority key identifier: 84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     26227
IP address blocks:        2620:120:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a0:3a:b4:e9:e7:93:66:fa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=32d20d96-eadf-4acc-8145-cdb2b4721199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:39:47:c2:6b:c1:ee:8e:6f:83:4e:e2:9f:
                    1b:1f:52:a0:d8:fd:12:49:09:9f:07:57:ea:15:39:
                    7d:95:5e:02:b7:36:ae:cd:2d:fc:be:55:68:f6:54:
                    e4:1e:99:3c:bf:12:8a:e5:81:8e:4e:bb:9c:08:e4:
                    67:fb:23:9c:fd:53:1a:29:e4:05:23:17:32:08:d2:
                    e5:e9:29:31:b0:fd:89:1e:38:be:70:ab:4c:6f:da:
                    b9:4e:de:fb:0d:df:1f:8c:d9:f4:47:72:45:be:01:
                    35:5f:de:01:b5:6a:fa:09:b0:71:7e:32:96:09:e3:
                    f6:6f:cc:e1:de:39:8a:dd:fc:d7:85:6f:da:cc:98:
                    c5:f3:ef:99:c2:76:a4:e9:dc:c1:97:ad:32:ed:8e:
                    ef:68:64:74:cc:e0:8e:a4:2b:08:8e:04:42:09:b8:
                    48:73:da:fa:94:53:21:cc:99:c4:a7:64:37:de:d4:
                    8c:10:a9:3f:e8:a4:94:d0:77:46:15:61:93:04:75:
                    28:15:b4:35:96:52:01:a6:a8:9c:15:5d:75:5c:58:
                    d4:59:13:18:da:73:ba:f4:26:3c:bb:da:bb:ec:7a:
                    13:50:96:76:32:da:31:18:ae:d7:a3:4a:50:d8:40:
                    f8:1b:6d:55:8d:c7:67:9d:ee:9b:54:8a:a2:4a:56:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:E7:B3:C1:61:4F:74:FC:D2:ED:F5:64:2E:BF:7D:A9:BE:EC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:85:d6:d4:0e:11:50:a5:01:1e:ee:21:fb:d6:43:d6:69:56:
         d3:bc:1f:df:4c:5f:fa:71:0f:52:d3:6d:31:a3:50:52:38:7d:
         ea:62:e9:22:3d:50:b2:02:7f:af:da:5d:93:bc:84:90:1d:c1:
         94:13:b2:ba:3f:ee:9f:9b:7d:7d:fa:d5:97:d4:88:04:a8:39:
         12:57:78:44:60:f4:85:b8:e1:ea:ff:24:45:5c:f6:cb:2b:9c:
         ce:f6:57:4e:f4:1f:3a:3f:f2:6f:85:df:8b:b3:85:9f:9e:a7:
         6e:d6:b3:bf:d5:4b:e6:e1:dd:cc:10:ee:25:42:ac:fe:5a:10:
         0e:00:e9:16:d4:41:63:4e:96:19:81:6a:10:d4:da:24:ed:9d:
         2f:b5:32:36:41:1f:c8:ec:ad:64:b3:35:83:e8:15:a2:a3:35:
         ee:81:83:ce:28:f1:80:6e:4b:fc:23:cb:97:61:25:77:e1:e5:
         fe:d3:0e:25:ac:1a:13:e7:22:24:c0:e0:16:6e:ca:94:9f:e7:
         d9:a8:3c:67:a8:df:bb:db:25:42:46:9b:46:bb:97:ba:dd:2b:
         54:7b:f6:38:14:02:42:77:0e:e9:0a:ad:07:c6:2f:06:58:a9:
         6d:89:18:c4:88:03:c3:02:a2:92:eb:32:24:41:ad:d5:58:a9:
         fa:e2:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:44 2025 by rpki-client