Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa
File:                     1e62cea0-b758-350e-8198-1006787cdbd5.roa (raw, json)
Hash identifier:          JryD8Z5reF5YHnHpjg8NLdpcOAKH62DOi3OP6mdAIKk=
Subject key identifier:   06:E4:93:7E:0E:17:0C:83:4D:D3:4E:AF:26:55:07:16:BE:8F:D2:BA
Certificate issuer:       /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial:       010D0C9F4328584AADF0FCE63B3A239778D1A700
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     19747
IP address blocks:        2620:131:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:fc:e6:3b:3a:23:97:78:d1:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=30c8b427-e955-4cf9-ad0a-39adf9f3e4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:85:dd:ba:3f:55:85:12:9e:7f:46:1f:fb:
                    0d:26:e7:ec:23:ff:7e:ee:63:3c:09:85:c5:b3:aa:
                    17:dc:02:48:57:7f:ca:0d:d9:02:8d:b4:f8:07:a7:
                    48:9b:36:af:09:ee:bb:74:88:e6:3b:0a:b5:a5:19:
                    24:56:61:ef:1e:26:f9:d8:9f:0f:bd:12:84:3f:8a:
                    e6:cc:7d:24:04:17:e6:ab:a7:7e:d6:02:08:ad:bc:
                    d2:c4:8c:44:48:19:b1:6a:c3:e9:52:3c:ec:29:ee:
                    09:f0:4b:8e:04:93:48:13:88:41:7f:3f:c0:04:78:
                    7d:73:4f:c5:8d:d7:a6:f6:f5:7b:32:ee:cc:9e:61:
                    8c:a1:78:84:45:02:01:eb:a8:7b:7b:01:86:a4:fe:
                    77:af:1a:eb:67:49:12:e8:6c:e2:af:55:53:46:cf:
                    79:c6:fe:d7:90:9c:51:51:96:d3:45:b8:68:61:40:
                    f6:6f:61:4e:53:f2:f2:24:9a:a4:0e:3d:26:32:14:
                    1a:9c:e7:b9:10:91:79:20:f3:93:05:e1:80:8f:53:
                    12:c2:41:b6:36:3d:7d:a8:0a:e5:bb:86:2a:f4:0c:
                    85:80:49:c8:66:cf:5c:b6:00:bb:38:0b:43:85:ca:
                    63:fc:87:a7:80:e6:b2:94:3c:2c:cd:77:a5:b6:3a:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E4:93:7E:0E:17:0C:83:4D:D3:4E:AF:26:55:07:16:BE:8F:D2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl

            X509v3 Authority Key Identifier:
                keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:61:63:99:af:01:90:e1:3d:e8:66:e6:fa:19:ae:71:42:
         cc:eb:1a:3f:6f:8e:d7:06:63:24:9c:73:cb:01:44:79:dd:f4:
         95:d2:4e:42:78:03:8d:8a:1d:58:d2:f2:b7:60:20:7f:72:f8:
         50:b8:dc:ed:4e:91:8e:91:9b:00:bc:4f:31:04:eb:3f:23:ca:
         45:48:5d:0a:8e:20:a8:ce:32:1c:ef:c7:0b:ae:15:6d:b0:dc:
         04:e4:34:ee:55:1c:6a:7e:b8:c6:b0:46:f3:ee:9d:d9:ca:6f:
         81:e8:00:85:cc:fc:d1:7f:8e:b3:24:10:15:7a:f7:49:5c:1c:
         34:c5:2f:d8:08:9a:fc:d3:9a:fb:7a:70:14:b0:ff:e8:68:77:
         2d:c2:c5:cb:3f:b2:0d:a1:e9:a3:4e:16:a3:56:ca:43:ce:59:
         12:99:aa:ae:ee:c8:61:fb:e8:ad:46:9d:24:5a:4b:94:74:f0:
         04:ca:f8:80:90:f5:14:3f:c5:77:47:2a:a0:30:c6:c2:a9:0c:
         77:23:51:9e:29:8c:f2:b2:bb:c4:57:46:c3:51:f5:44:ee:19:
         06:7b:ff:e9:02:dd:57:9e:b4:73:a0:64:56:0f:e0:bf:bb:9b:
         18:0f:b6:5e:48:84:0d:dd:23:f2:11:3a:50:f0:8d:c4:55:5b:
         06:0b:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:56 2025 by rpki-client