Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa
File:                     a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa (raw, json)
Hash identifier:          0PaYjxxx7bAZ5NpAD6o2GmIgu4/YY9clQjLR+WAV9/A=
Subject key identifier:   59:51:29:05:AB:EE:59:A6:B6:EE:D5:10:F1:75:3C:F2:9D:DD:CB:31
Certificate issuer:       /CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6
Certificate serial:       010D0C9F4328584B1806CE24AF513AE6BACCC3B8
Authority key identifier: 12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11399
IP address blocks:        2606:6b40:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ce:24:af:51:3a:e6:ba:cc:c3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=bb8932a5-08b5-4c02-b47b-6bbd3f760d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:37:a2:bd:f3:61:d9:f7:83:49:6d:f1:69:
                    b1:1e:0d:b9:10:7b:80:2b:cb:67:62:6b:d0:b0:ef:
                    41:13:2c:93:fd:a6:fb:ed:89:88:20:c5:a4:6a:3c:
                    15:7f:60:b3:58:9f:1b:7c:af:e6:6a:2c:a4:48:c0:
                    33:8f:3b:e6:2e:04:aa:07:0d:7f:41:c0:c6:37:41:
                    81:53:b5:91:3b:73:28:0c:7e:52:84:8c:7e:7a:5e:
                    09:f3:f9:e4:67:57:9c:2b:f6:32:96:61:c2:46:16:
                    f7:28:cc:2e:ed:e3:79:e5:b3:34:2e:03:8d:25:c1:
                    33:5d:b3:a5:d9:54:c0:88:16:5e:23:df:a5:0c:c8:
                    d4:32:4f:7b:ed:04:5c:e9:99:d3:3c:93:66:07:f8:
                    ea:21:3e:81:07:3c:2d:73:dc:39:91:3e:f0:e7:ee:
                    e9:ca:42:8e:84:dd:83:e4:2f:5c:1e:41:16:7a:79:
                    81:17:21:97:3b:e1:2e:1a:d8:0d:0b:ff:53:47:af:
                    7c:f7:2f:9d:d1:0e:92:19:51:ea:6b:c9:6f:7e:12:
                    b6:65:9e:3a:2c:f8:bf:42:f2:16:4f:5a:b3:4d:19:
                    3c:ae:a2:18:9d:ad:90:de:8e:1b:6d:92:43:46:bb:
                    49:72:9d:89:44:57:2a:ec:55:f9:dc:73:c8:d2:c6:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:29:05:AB:EE:59:A6:B6:EE:D5:10:F1:75:3C:F2:9D:DD:CB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl

            X509v3 Authority Key Identifier:
                keyid:12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b40:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e5:b0:20:f0:ce:9a:3f:ee:38:19:41:40:20:57:94:42:db:
         5d:7d:a8:d0:e1:ea:e4:b7:c8:af:33:83:c9:0f:20:86:2e:6a:
         e7:8d:b0:ce:bf:9c:96:5b:e3:c1:00:78:02:6e:33:94:6f:b3:
         8a:4c:16:01:8f:92:cb:25:07:7d:4d:27:4b:63:88:87:9b:d2:
         d6:31:51:f9:32:42:f1:f9:2b:61:ba:0c:e4:89:b9:bf:2d:0b:
         79:d1:f5:04:cc:ff:b1:a3:b3:0c:a3:64:61:aa:97:55:70:d7:
         5c:61:87:b6:5d:14:73:6b:e9:d9:d3:42:e1:3d:fc:c0:f4:c2:
         d7:64:ad:34:e3:c2:82:1b:fc:24:7f:b0:8d:a2:a3:09:08:7b:
         a7:28:41:ac:6c:7b:91:81:d1:0e:fe:e0:de:f1:94:f8:00:47:
         c2:16:6b:6b:c0:68:e0:f2:72:14:d9:34:2b:57:ba:ef:22:da:
         ff:ef:25:d5:5c:ee:ed:11:69:59:9d:54:ac:38:07:17:22:95:
         b7:ac:c1:66:75:b6:11:c5:4a:3a:b9:10:08:07:27:ef:b3:2c:
         52:a4:e1:1f:01:9f:bc:73:8a:6e:9d:49:85:c3:48:49:cc:d4:
         dd:1b:77:b2:d2:65:92:77:0f:94:61:71:53:6f:5c:0c:3f:a7:
         6b:76:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:49:41 2025 by rpki-client