Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa
File:                     90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa (raw, json)
Hash identifier:          muGTg5PB9D6mt0GdCheW9/+/e/aEv9IcEOxN6fodiro=
Subject key identifier:   E3:67:8E:66:5A:B7:4C:43:0E:B2:A4:AC:1A:9A:76:40:44:1A:49:CA
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584B2A2C27B3B21A8EA8ACF85300
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     209453
IP address blocks:        2604:3400:dc1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:27:b3:b2:1a:8e:a8:ac:f8:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e783f725-6ff4-4c05-b101-0f6ebbcd15a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:64:58:6f:14:0c:19:75:32:3f:3c:20:41:
                    2b:a2:4f:1d:bd:a6:69:68:d9:37:4d:70:4f:ee:50:
                    90:d6:dc:95:9d:aa:7a:89:04:3d:b7:96:03:1f:60:
                    1a:99:ba:f0:f0:92:e7:f1:ae:35:23:ff:ec:68:f7:
                    f8:9c:c0:10:6f:a7:e3:75:ae:ca:8d:53:d1:ae:5e:
                    bd:7a:95:83:9f:57:6c:ab:01:72:54:ac:d1:1f:3d:
                    bf:8b:b2:74:28:eb:01:ac:22:ae:c2:14:ca:fe:ba:
                    db:14:61:53:b0:80:da:08:e8:20:62:87:0a:20:26:
                    3c:0b:ef:b5:79:97:5a:fc:15:48:b5:5a:0f:21:2c:
                    f1:64:66:eb:f2:aa:a3:3d:79:4d:a5:54:13:c9:2d:
                    77:1b:1c:1d:66:86:36:86:fc:e2:bc:52:cd:5d:5b:
                    c6:20:37:be:15:16:da:17:c7:f0:6b:1c:9a:9c:5d:
                    41:73:80:bc:5f:7e:69:de:e0:42:88:9e:a2:97:55:
                    9d:f3:c6:55:0e:25:27:cc:1d:08:49:ea:af:11:3a:
                    ab:4a:0c:46:9c:15:f8:79:78:00:d9:3b:e3:66:b4:
                    ca:ac:70:11:ea:f4:90:a9:47:94:c4:69:02:1b:c8:
                    44:35:29:49:eb:67:be:c0:e3:e7:8f:85:a9:2b:60:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:8E:66:5A:B7:4C:43:0E:B2:A4:AC:1A:9A:76:40:44:1A:49:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/90ab05ba-2de5-3398-b8f4-cb836c1eda4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3400:dc1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:ea:dc:d7:c6:d6:e7:d4:e8:35:28:36:13:84:c2:f7:ef:
         3a:3f:1a:cd:e3:e3:f4:1d:eb:bf:91:ce:33:39:a4:77:59:10:
         c5:59:09:71:c2:31:54:ac:93:67:0c:09:da:54:a1:3c:79:8f:
         be:26:85:82:48:01:e4:ed:bc:33:95:9a:85:8d:b9:85:53:9e:
         87:7a:f4:97:0c:7c:0c:88:dd:8e:83:b6:1b:99:64:c0:fa:cc:
         ac:1d:bb:fc:8a:01:47:53:e2:17:8e:ff:35:2a:f6:1c:d3:e4:
         d6:23:4a:d7:7c:4f:84:ca:a1:62:b9:c5:33:ce:53:6a:0a:34:
         51:0d:51:df:58:24:ec:c3:5a:be:69:94:fd:51:7f:99:e8:3a:
         23:a1:e9:10:52:79:d2:14:f6:08:cf:36:75:8b:7b:47:69:1a:
         1b:8d:e1:fb:e8:69:7f:f3:f1:f9:5e:53:9f:90:51:a6:d2:79:
         f7:1c:8b:db:63:2f:20:1f:df:c4:45:d6:fa:e3:07:fa:65:ab:
         7c:4f:98:de:66:17:14:cb:02:cc:3b:aa:7e:d1:55:cf:e3:9d:
         7c:99:e9:e5:65:e4:24:b9:2b:f4:ee:15:47:82:1e:f2:6d:55:
         0a:d0:d7:fe:c4:a5:08:5b:27:31:21:b6:16:9c:9d:6d:e2:4e:
         7b:ac:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:55:52 2025 by rpki-client