Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
File:                     bfcdd663-08b3-346e-ada1-b6829e7360ce.roa (raw, json)
Hash identifier:          yYxl3P0P1GwWew9g/1AupqeDcjqduwSCiG26CYGzKZk=
Subject key identifier:   63:5F:14:2A:7D:D7:D8:EA:57:91:46:1F:54:59:B0:16:AE:7C:A1:1A
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F4328584B5571E04584FEA94586619560
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        2602:812:2003::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e0:45:84:fe:a9:45:86:61:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=dea8de2b-e688-41dd-99e0-4d248293f0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:3d:af:e8:34:67:56:75:44:ae:0c:19:d8:
                    90:40:28:91:e3:c5:17:2e:fe:1c:da:b6:f7:76:85:
                    6a:08:ba:0f:4f:15:86:9f:a3:ba:fb:b6:b4:a3:00:
                    5c:cf:99:4c:b5:a3:d5:e0:e0:0e:34:b7:0b:00:ab:
                    95:2c:45:63:26:e4:63:53:b8:8a:77:1c:f4:9f:c9:
                    14:a5:17:f8:65:48:da:69:83:b8:02:02:ee:78:6d:
                    46:0f:48:78:39:49:ee:a1:1c:98:c9:54:ec:e9:30:
                    9e:26:7a:92:73:b5:ed:2d:e8:92:93:d2:63:5f:16:
                    ba:ae:95:e5:8e:3a:f1:78:68:1f:b4:88:db:1e:13:
                    9e:c9:3b:ba:c7:fa:4c:b0:aa:af:9d:a0:c1:0e:a4:
                    d6:bd:1e:60:38:4b:d8:33:81:b4:61:46:dd:ab:f8:
                    14:cc:e6:41:08:57:ad:ec:d4:fd:1a:be:7c:51:f7:
                    46:5f:29:2c:8b:62:42:e7:4d:7f:fc:9e:18:59:cc:
                    19:24:0e:bc:a8:ff:12:92:cc:18:8e:ef:94:45:b0:
                    5c:5a:4d:f7:c7:53:54:a7:10:90:a6:75:85:81:00:
                    a7:d2:7d:36:f2:88:3b:0f:9a:94:25:64:8e:7a:93:
                    cf:42:c4:1c:07:13:ed:c4:b5:7a:58:d7:50:29:dc:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:14:2A:7D:D7:D8:EA:57:91:46:1F:54:59:B0:16:AE:7C:A1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:0e:65:9b:1b:6b:39:65:a6:4c:23:79:4e:27:4b:d1:88:
         31:8b:cb:ae:05:8d:22:b7:12:89:e8:ef:d5:05:9e:7f:d7:4e:
         c6:31:eb:cc:7a:73:6a:44:b7:be:f9:fc:a3:84:eb:6e:55:01:
         9f:68:ae:2b:9f:f0:48:19:43:8c:b1:fc:3b:c0:d9:fe:76:51:
         5e:a9:67:a0:70:41:d6:65:a6:2b:6a:78:cb:06:39:20:29:1c:
         09:53:c2:cb:4f:24:00:5b:35:dd:01:ea:a5:aa:fe:1d:4c:23:
         79:2c:9f:f1:d6:36:68:5c:cf:c4:b2:c6:8f:33:86:85:5b:80:
         c1:62:b8:5d:ab:d8:e3:55:4e:ed:65:05:b7:67:6a:46:03:76:
         71:2e:51:98:9e:a4:f4:1c:bf:70:6e:86:a0:54:c4:64:f2:8b:
         2d:3f:dd:2e:37:9d:66:77:3d:15:ef:42:f3:16:38:67:79:b3:
         ee:20:ca:4b:10:d5:40:16:19:82:dd:60:97:0f:2c:b4:56:d9:
         3a:0b:a1:63:43:10:08:16:58:19:15:27:f7:51:7d:6e:11:47:
         aa:0a:3a:c2:04:45:42:d0:5e:d9:12:83:b0:39:b0:29:81:ad:
         f5:8f:29:c2:8e:17:8b:79:6d:8a:03:67:eb:05:aa:bb:01:0a:
         59:b4:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:49:38 2025 by rpki-client