Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
File:                     307298f7-d8c6-36b2-a709-98bfd0d6750b.roa (raw, json)
Hash identifier:          +rU94ZeIWBRjv++LgKGFibq7IiTO3sfSIBBbnTJVCcU=
Subject key identifier:   B1:51:B5:C2:C0:E1:71:70:1F:8D:C2:2F:B8:BE:C4:63:43:32:CC:AB
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F4328584B33F19A60610077EEECD38800
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     18519
IP address blocks:        2605:fac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9a:60:61:00:77:ee:ec:d3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=c9ed72bb-2cca-4605-a16f-09e0459fad73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:54:6b:ff:ca:3c:a5:dd:2e:45:e2:21:02:
                    3d:a0:81:28:ef:e3:44:dc:e3:fb:aa:45:c7:9b:a0:
                    3d:fe:ae:dd:e9:bd:2f:ff:15:7b:d9:94:bb:f6:4a:
                    00:3f:3b:b5:72:c2:b0:6d:f5:0c:8b:5f:c1:42:ea:
                    92:35:f2:df:22:02:8f:68:4e:95:10:f5:4e:85:ba:
                    e9:49:15:35:9a:27:1c:5d:c8:82:65:ff:13:46:52:
                    40:2a:75:c8:9c:9b:3d:91:53:19:e0:26:c7:16:67:
                    f6:3d:bd:0c:b1:c1:e9:f0:77:7b:6e:55:e9:c4:ff:
                    79:ce:4f:a8:8b:7d:36:84:05:f2:6f:71:4b:4c:45:
                    2a:fe:cd:fc:2f:04:fe:5a:2d:b2:58:f4:6a:5f:0d:
                    c8:32:85:3a:7c:14:c9:4e:95:b6:99:f1:53:cb:34:
                    77:af:84:b2:d9:79:eb:2c:db:66:27:84:1c:44:ac:
                    95:09:2c:ba:bb:55:2a:2c:18:29:99:3f:81:c6:52:
                    60:a2:bd:6e:fa:c3:36:98:26:c7:56:b3:02:0d:5b:
                    a4:cc:2f:63:e9:56:3b:41:7c:e9:6c:12:8f:11:da:
                    97:3b:80:d1:9c:d8:7a:42:ae:55:db:0f:de:a8:d3:
                    d7:1a:24:6c:61:1f:97:23:1d:52:c0:4c:c0:47:13:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:51:B5:C2:C0:E1:71:70:1F:8D:C2:2F:B8:BE:C4:63:43:32:CC:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:5d:c1:34:e8:88:2a:63:e9:95:29:48:da:ee:8d:ff:db:
         8e:bf:ea:68:a7:99:32:3a:e7:9b:ba:5c:4a:ed:b9:7f:45:da:
         c8:1e:0d:ee:ba:91:72:fe:b2:0a:c3:93:ce:1b:4f:8f:d8:31:
         ec:60:43:e8:c0:a5:36:f9:fc:f0:29:90:ee:ff:db:4f:f0:12:
         dc:29:90:b5:8b:f8:0b:37:71:19:c7:0d:57:a6:cd:f2:bd:76:
         c0:29:d9:3e:e3:dd:b7:ef:f0:0f:aa:fd:5f:94:3f:6d:c8:45:
         b6:35:f1:48:e4:ce:6d:c0:e8:8a:6a:22:0c:7a:6f:bb:2e:5e:
         3e:bd:df:29:ef:a7:eb:9d:4f:e6:c5:32:44:7d:f0:98:2d:dd:
         2d:1a:9a:d1:ce:57:15:4a:28:f1:0d:88:59:1f:b7:02:fc:f3:
         95:03:00:46:ef:0a:0d:56:d2:5e:4e:c2:1f:3b:b0:60:9a:e0:
         b0:fc:ca:a0:4d:4b:2b:81:24:b7:6c:94:47:22:65:b6:64:5c:
         9b:f5:0f:0f:67:a5:7a:3c:71:f0:2b:81:f0:d0:a4:82:81:c4:
         1c:f3:ad:26:53:dd:f9:b1:97:9b:0f:45:f1:f3:95:10:87:33:
         ea:04:44:3d:11:2b:3e:e2:97:e0:a4:a2:a4:d2:dd:a4:14:96:
         00:b5:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:58 2025 by rpki-client