Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/8dbeb510-7380-36c9-acae-b6db0f49d52a.roa
File:                     8dbeb510-7380-36c9-acae-b6db0f49d52a.roa (raw, json)
Hash identifier:          wbME6cHdaqOFozwHF/r8Wak8dy09PYItbgn34uXV9uU=
Subject key identifier:   0C:2A:08:06:B8:5C:F9:EE:F6:A9:CF:65:46:E7:50:9E:AD:99:48:B8
Certificate issuer:       /CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
Certificate serial:       010D0C9F4328584B01B1489E9333A7C16202DD80
Authority key identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/8dbeb510-7380-36c9-acae-b6db0f49d52a.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     393301
IP address blocks:        2605:2680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:48:9e:93:33:a7:c1:62:02:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=f8e36ab2-c403-41b0-9730-1e6c22b6ab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:8b:f0:31:34:f9:ae:24:46:06:99:fa:80:
                    69:c0:a1:a7:39:ad:7a:1e:b4:bf:b9:7f:d8:78:60:
                    06:08:2c:fe:64:82:07:9c:b2:3b:59:ab:09:32:25:
                    99:e7:06:99:b8:17:13:ba:a2:52:9f:95:1c:36:f2:
                    10:c0:64:0a:a2:10:e5:49:72:a7:48:e2:bc:8f:c8:
                    09:f1:94:d3:d2:c8:b4:49:a8:0e:dd:7a:a0:76:f9:
                    02:50:8e:7d:ce:8b:66:08:ed:89:95:b2:12:2f:cf:
                    89:8d:44:16:e1:13:79:bf:1e:d1:9a:a9:97:80:df:
                    42:53:17:ce:1f:08:f5:a8:ff:c4:9e:4d:01:77:84:
                    52:de:5b:fd:03:00:e4:4f:06:37:08:2c:f3:8f:a8:
                    16:4e:59:fb:80:75:cd:d2:d6:47:74:c0:37:be:07:
                    ad:91:13:c2:0a:f2:db:31:9b:5b:82:6d:e4:73:fc:
                    30:46:82:b1:e6:98:22:74:f9:41:78:72:0a:23:d4:
                    7e:76:fd:49:ba:45:8c:50:01:26:68:88:1e:fb:43:
                    8b:2d:47:d7:85:43:6e:7e:f0:d0:44:6c:94:43:89:
                    21:65:97:1f:bf:8f:84:5e:64:8c:39:8a:57:d9:53:
                    fa:8a:93:75:c9:15:c7:cf:f6:7e:d6:b3:3c:a7:6a:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2A:08:06:B8:5C:F9:EE:F6:A9:CF:65:46:E7:50:9E:AD:99:48:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/8dbeb510-7380-36c9-acae-b6db0f49d52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:ae:64:32:e2:18:aa:0c:23:fe:39:ea:a6:db:9d:0e:1c:
         bc:84:a9:42:69:f7:30:97:c8:e9:22:0b:c9:25:b0:34:2a:45:
         9f:8a:65:b1:dc:4c:03:9e:50:a6:1c:55:3d:08:bb:23:f3:05:
         b3:d7:aa:9b:dc:90:c2:c5:36:4e:7c:95:a5:e1:c8:85:17:bb:
         7e:70:80:7a:f9:1e:66:89:cc:88:9a:2a:e5:c2:b3:46:31:35:
         c6:a2:7e:4a:41:f5:63:26:96:2a:0d:b4:d3:73:14:fb:66:26:
         c5:5a:12:f4:ad:35:5b:df:b9:ce:29:35:8b:31:7b:1e:fd:ec:
         50:56:00:fe:fd:d8:f7:1c:c9:4b:58:be:24:51:3d:39:9d:1f:
         f0:d4:58:d1:a3:d8:01:e6:67:0d:82:ce:55:c6:8c:9d:7f:d7:
         a1:58:67:24:d9:e0:e0:80:e4:89:c3:24:ff:be:c6:c0:ed:95:
         2a:aa:5a:20:35:d4:f4:85:6c:0d:3a:36:89:5e:ac:97:f6:ba:
         dd:a2:a2:69:5e:31:86:90:ef:0b:80:07:50:bc:67:0d:3e:13:
         7f:a6:bb:76:80:b6:54:2f:25:fc:2e:cb:82:ea:f9:d3:5f:ab:
         ac:80:21:93:d5:1a:54:a8:8d:ea:96:73:ea:91:61:ce:59:cc:
         54:7c:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:13:39 2025 by rpki-client