Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
File:                     61fa3b7e-9320-3d30-aea2-938b200f9f76.roa (raw, json)
Hash identifier:          kgEU3sjibuU+xE2F5wZdwxrKQ0rwVhaCBuGpQlv+Fmg=
Subject key identifier:   E2:87:77:38:97:6D:18:D3:02:C5:2C:18:2D:88:EF:50:FD:72:6E:36
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584B48E1B6A1F98256555D6601C0
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     26914
IP address blocks:        2001:1898::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b6:a1:f9:82:56:55:5d:66:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=ffa5d262-18fa-4f67-acc9-cca9b6478fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:04:40:d2:a0:a3:77:49:5a:d3:ad:81:a2:
                    c5:08:3b:74:56:6d:a7:57:74:a3:fe:52:91:e5:8d:
                    8b:69:e2:71:38:e2:3d:dd:cf:72:f1:c2:dc:f1:1e:
                    2b:b0:38:29:89:f2:4a:fb:28:ef:6f:c7:43:7b:2a:
                    cd:82:fd:a2:92:3c:75:4b:6e:24:25:7a:57:27:62:
                    7e:63:91:e4:c3:22:49:8c:ca:ec:95:f6:f1:32:f3:
                    3b:f0:c4:a3:52:1e:2c:36:ab:a8:26:cd:a0:09:fd:
                    67:d6:4f:a3:f3:ff:25:ca:e8:04:01:1e:e3:78:a1:
                    dd:0e:6f:b4:09:c1:76:49:14:0c:3f:ab:b6:5e:96:
                    1e:83:36:6f:2a:e8:3c:95:4f:c9:5d:4e:17:fc:22:
                    63:8b:c7:09:20:5a:87:bc:35:ad:f2:04:b7:15:69:
                    97:e1:1b:30:23:ee:ab:5a:63:3a:b1:e1:cc:2b:0e:
                    7c:3f:d1:7a:71:62:af:7b:4a:4f:63:b6:fe:06:c6:
                    53:e5:ae:fc:42:38:97:27:52:6f:5e:0c:bb:c7:59:
                    bc:b4:68:b9:0a:86:15:22:7f:0c:57:5b:23:f5:89:
                    fa:40:2c:d8:ac:26:f5:05:ff:f4:9a:1f:d6:53:89:
                    91:10:22:7d:aa:dc:d5:22:b0:5f:64:7e:28:2f:c7:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:77:38:97:6D:18:D3:02:C5:2C:18:2D:88:EF:50:FD:72:6E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:c5:45:de:65:b4:38:6b:1b:03:3c:9d:6d:37:09:96:ea:
         80:4d:49:de:6d:f2:4d:12:73:6b:a9:36:a0:6d:46:1f:fb:eb:
         bd:55:5c:48:72:11:f0:0c:9f:5a:79:d0:e1:71:1e:37:84:d2:
         8e:f2:e5:a1:95:ee:b2:86:23:bc:41:5e:c3:ff:40:e2:fe:a1:
         06:3f:34:d3:8c:0e:2b:5c:fc:c0:10:7a:6c:31:45:8b:b1:c8:
         7a:76:1a:eb:7f:c2:6b:cb:08:e0:a2:ca:94:89:1a:cc:fe:af:
         92:09:c4:b8:4b:ca:87:e0:0a:64:ef:55:8f:2d:02:b9:62:97:
         f6:e6:37:3c:2d:88:48:a9:15:12:a2:aa:4c:8d:91:60:1e:9c:
         43:ad:6d:6d:ce:e0:1d:30:cb:d4:63:44:71:f4:ff:46:f7:4a:
         e7:1a:29:22:33:06:91:9f:2f:76:d5:f3:f3:c5:b9:b1:42:31:
         96:fe:e0:bf:c1:a8:a5:99:de:7d:21:17:3e:81:b5:4a:cb:5d:
         61:65:71:63:83:43:c2:fd:93:bb:ad:0b:02:9b:3a:22:57:56:
         13:6a:4c:f2:5d:96:59:43:28:cb:79:36:1e:e5:f0:b0:2f:d1:
         35:e8:4a:91:fb:7e:24:31:23:84:a8:9f:c3:91:68:b5:6a:61:
         ed:ad:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:15 2025 by rpki-client