Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa
File:                     8e93330e-22b7-3484-8faa-484a30b48584.roa (raw, json)
Hash identifier:          h80/OFolwxJrjyHehM8mlNTr7Q9xA7AmFka2OU+OJ9k=
Subject key identifier:   30:82:D6:DD:65:9E:9E:F9:86:C7:CB:3B:27:4D:B4:04:C7:11:86:61
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584AB650E29CBF84910625092B40
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16796
IP address blocks:        2620:b0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e2:9c:bf:84:91:06:25:09:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=def3a9cd-a2e4-419d-9134-5e18003f2076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:e9:6f:5d:59:36:98:b3:68:83:6d:2c:74:
                    59:69:7a:48:35:28:4f:f0:1c:47:b9:4b:15:3a:4f:
                    83:1f:18:1d:b6:7f:e9:68:6e:fd:de:5e:29:5d:68:
                    d9:2c:54:ea:8e:2e:64:c9:41:c6:14:da:e5:51:0f:
                    a3:d0:18:4c:27:7c:0c:3b:eb:81:18:62:ae:3d:27:
                    bc:00:c7:de:b4:60:72:90:a0:77:99:9f:f5:31:c2:
                    ee:64:3c:92:6a:95:ce:b1:42:c8:aa:b1:b5:74:d8:
                    d3:06:91:de:ed:98:2a:13:90:d8:b1:46:6f:25:3d:
                    9b:fc:d6:ee:1b:65:3b:ad:8b:c5:a4:c8:21:91:c1:
                    92:66:96:d6:58:cc:7c:6a:fe:db:7f:e7:00:96:24:
                    ab:11:f4:8a:ca:5d:6f:3f:76:fe:2e:c0:37:89:a4:
                    46:01:60:a1:1c:8d:01:25:ac:e6:dc:1d:94:1f:55:
                    37:fc:f8:ef:e8:da:25:8a:8a:9d:20:e0:80:65:c9:
                    fb:ed:0c:36:57:ed:c1:9a:43:02:5c:78:b0:c7:be:
                    a6:60:82:9d:a1:69:8f:8a:12:66:a4:fc:7c:50:f6:
                    63:bc:29:c0:19:cb:bb:78:45:04:2f:98:10:9f:cb:
                    ff:a9:2a:a1:75:a6:cc:22:05:70:ee:10:38:95:55:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:D6:DD:65:9E:9E:F9:86:C7:CB:3B:27:4D:B4:04:C7:11:86:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/8e93330e-22b7-3484-8faa-484a30b48584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:05:2d:88:49:4f:56:8d:2f:1f:fa:c1:98:27:6f:0e:1c:
         24:ca:11:ee:a1:b8:db:48:91:65:5d:f5:54:9f:81:05:34:94:
         b0:f9:ca:81:40:df:b7:f9:c4:51:81:21:5a:04:91:5a:c5:67:
         a4:d5:2e:15:2f:d0:7c:35:ab:d3:15:d0:f7:a4:53:d1:96:76:
         60:c1:0e:69:97:38:17:df:01:f5:c2:3c:ce:2d:dd:02:45:b4:
         c8:6e:b3:4f:9d:87:94:f9:17:32:70:70:f9:0f:51:65:ba:1d:
         95:0b:51:74:4f:f3:bd:f1:51:c2:44:49:91:63:47:d3:10:53:
         ab:b0:bb:1e:be:c2:10:3c:be:c3:cc:97:40:cc:df:3c:eb:d8:
         18:5e:2b:68:fe:be:c5:cc:b5:f8:9b:e7:b0:40:da:24:8b:21:
         3f:fe:c6:b0:31:6a:b7:b6:46:c6:2d:b1:93:49:18:80:85:5b:
         07:b4:97:74:1c:db:2c:3b:0f:72:6e:d7:80:8e:0b:a7:e1:dc:
         ef:3e:a6:40:a8:33:a1:8f:07:d7:25:26:84:90:0d:ea:6c:0b:
         bd:22:55:e0:ec:ac:25:9e:b8:e6:f1:91:83:3c:21:87:9b:80:
         c7:f4:b8:be:86:60:ae:67:cc:c7:60:1d:3a:35:d0:7d:7f:8c:
         62:7d:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:56 2025 by rpki-client