Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/dad10f06-86f9-342e-93fb-11ceac1de4c9.roa
File:                     dad10f06-86f9-342e-93fb-11ceac1de4c9.roa (raw, json)
Hash identifier:          duF/3NYM6cnuNXJ9MTN+i2igaXlMOynd2SmGjD2A/7M=
Subject key identifier:   14:C6:F5:AF:B0:F6:98:BA:DE:FF:70:8D:A2:DE:C9:95:78:08:06:2C
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F4328584B031693E916A8A7A4D4964C40
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/dad10f06-86f9-342e-93fb-11ceac1de4c9.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        2602:812:2001::/48 maxlen: 64
                          2602:812:2002::/48 maxlen: 64
                          2602:812:2004::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:93:e9:16:a8:a7:a4:d4:96:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=12c458ad-a376-401c-8d92-7d87a44d7ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:3d:fa:c6:03:c6:04:8c:17:da:98:d0:06:
                    0b:b5:12:ff:a3:b5:96:18:c0:15:90:31:26:ee:f1:
                    0d:93:67:3f:23:27:66:b0:3e:9d:f4:2b:c7:21:3e:
                    d7:02:b0:31:f8:59:58:6f:8e:cf:9e:02:17:9b:04:
                    0e:e5:ad:a7:2d:55:b0:39:3a:69:9a:e2:d3:16:28:
                    47:ce:7b:75:6b:56:6d:a9:62:a0:37:34:10:3a:07:
                    51:3f:e5:e0:da:b7:75:57:f6:87:92:2b:60:2b:6e:
                    2a:be:20:b3:99:03:4b:f1:7d:2e:91:98:b9:4c:2f:
                    3b:18:52:72:86:de:e3:5e:9a:55:8b:7b:ab:de:e6:
                    b4:25:44:75:eb:03:35:39:e9:e8:23:93:68:63:79:
                    ed:6c:9a:c2:6d:53:fb:30:38:ae:03:d0:14:21:ce:
                    61:f4:33:45:01:dd:49:49:07:67:69:a6:d0:81:a6:
                    f4:24:6a:8f:24:02:02:2c:73:21:94:36:ab:c8:d7:
                    aa:7d:64:42:e1:19:43:6a:85:47:84:59:1f:c0:e6:
                    a1:d0:f7:c8:38:1d:29:4c:80:e7:1c:ed:db:b2:d6:
                    eb:e6:f3:eb:94:22:ea:2f:7f:29:2f:1c:b4:19:ba:
                    35:5e:7c:b4:0d:aa:d6:8a:ea:a3:5c:27:c2:05:3a:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C6:F5:AF:B0:F6:98:BA:DE:FF:70:8D:A2:DE:C9:95:78:08:06:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/dad10f06-86f9-342e-93fb-11ceac1de4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2001::-2602:812:2002:ffff:ffff:ffff:ffff:ffff
                  2602:812:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:a1:ba:84:82:7d:0e:b0:56:86:76:77:de:86:70:ec:a6:
         7e:ae:68:ff:5b:ee:9e:4e:6e:c0:e7:99:1f:b7:3d:8b:65:3d:
         7c:ae:a0:54:d6:f9:88:49:a5:ae:9f:c3:c0:e8:b9:d5:8e:c9:
         05:db:52:ef:c3:cb:5d:66:e2:4e:5d:5a:e8:97:c3:f4:99:0a:
         95:75:0a:63:db:e1:60:50:48:46:73:ad:c2:05:9f:eb:7e:85:
         dd:7a:56:c5:57:17:8b:24:57:7c:76:72:c6:eb:33:db:7b:10:
         1d:f0:19:82:4b:3d:ad:4c:d4:51:e5:56:cc:43:c8:26:e9:2e:
         0d:c7:ea:80:3a:5e:a5:14:85:64:0a:02:8c:df:f7:c7:74:b5:
         cb:b7:c3:3f:ad:a4:0f:20:c5:78:27:ec:73:98:01:56:fd:4c:
         f5:d2:b6:61:df:0c:3c:1f:54:c7:fa:a1:f6:9e:d1:7a:9e:ca:
         4b:71:48:f3:8a:08:3e:77:2d:32:b0:fd:9d:ee:fc:5e:d3:c3:
         d2:1f:24:b6:a0:09:83:81:10:12:4b:28:12:dc:29:dc:40:05:
         33:69:cd:a7:80:66:94:84:9d:94:7a:f3:12:3a:e6:b1:1d:87:
         58:e4:57:e2:4c:a5:94:a1:0f:9c:47:9a:77:76:30:19:f0:60:
         c6:ae:46:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:49:40 2025 by rpki-client