Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa
File:                     053ee818-e26b-3e69-834c-c3455b78c570.roa (raw, json)
Hash identifier:          yGdJAD/nLAxDh0krRzQNnCxIol17GgXZ5uMYjfa3w6k=
Subject key identifier:   58:49:0B:27:EB:EC:FD:C4:C1:1F:D8:61:03:43:78:A2:2E:4A:6C:B2
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B28C6E09E494307F584F42A00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     28110
IP address blocks:        2606:f180:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e0:9e:49:43:07:f5:84:f4:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=c88c4b0f-ce66-4081-8c84-c2d7f378b87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:82:7b:ed:1c:b3:f4:a6:8f:36:a7:77:61:
                    ef:e7:5b:9d:9e:4b:5c:23:d3:da:8c:3c:b9:f4:46:
                    10:4c:5f:1f:be:95:b0:50:81:da:a7:3e:71:3d:02:
                    4f:19:46:40:9a:af:9a:71:f1:ad:fe:69:c4:63:b5:
                    0b:19:ff:aa:70:1c:0a:20:73:b6:b8:32:b9:f3:ca:
                    30:7f:1a:d9:69:94:c4:2d:47:8d:ca:23:03:56:7a:
                    39:57:dd:84:f7:68:3c:29:07:ff:52:d6:fa:87:cd:
                    e3:0b:a7:00:1f:27:7e:8d:c1:1d:7f:c0:df:e4:4d:
                    05:f3:a2:02:b8:d0:ac:e2:42:a4:c6:12:42:0d:c8:
                    ef:6c:f7:d0:90:7a:9b:64:bb:52:4d:74:ec:88:7d:
                    e6:f9:cf:78:c6:e8:43:f3:66:65:20:ca:a6:e3:1e:
                    20:07:15:4f:2c:41:1a:2c:74:f9:ec:70:17:ee:08:
                    10:e7:78:5a:2a:f1:83:68:be:00:60:e2:ad:c6:1d:
                    1d:a9:99:47:69:5d:7b:70:7f:3b:8e:7e:ae:21:07:
                    4f:02:80:3d:fb:da:16:9a:d2:60:2d:c1:df:23:5d:
                    e4:29:e7:42:ba:79:5e:03:25:9f:47:2e:46:20:56:
                    2d:7c:0f:74:99:e2:24:e3:a2:fe:9d:e9:de:e1:ea:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:49:0B:27:EB:EC:FD:C4:C1:1F:D8:61:03:43:78:A2:2E:4A:6C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/053ee818-e26b-3e69-834c-c3455b78c570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:a9:b0:20:39:6b:fe:13:68:77:de:83:5b:37:53:74:95:
         e1:30:3e:62:79:b8:60:7b:cd:3c:6b:a6:89:bb:41:04:55:f4:
         5e:55:67:d9:2f:8b:50:d1:bf:b0:35:60:48:32:35:ca:91:d5:
         21:4b:29:62:3e:39:5c:a3:c9:b3:af:72:87:07:fe:62:2c:f8:
         06:4d:2a:ae:f4:9c:48:a7:51:1d:6c:98:0d:03:bb:bc:6a:53:
         ec:78:c3:1a:44:fe:7c:38:4b:a2:0c:7f:a0:de:2a:e0:31:d0:
         6f:d3:6b:9c:40:76:cd:1c:39:e7:75:f5:75:bf:78:bf:db:22:
         2f:8f:73:16:12:c5:88:6e:6a:85:1e:17:6e:29:9c:80:9b:a5:
         91:90:53:10:ab:87:ba:54:bd:d1:44:f0:1f:4d:74:8f:cf:6e:
         66:b4:f4:09:4c:95:30:0f:af:43:93:69:95:6b:a6:69:52:0c:
         ea:bb:07:5a:a9:83:f5:76:50:d8:9d:cc:0c:36:e7:5e:ee:4b:
         90:e4:b6:69:cf:61:fc:7f:2e:60:3e:48:48:7d:99:df:b4:57:
         9c:bf:51:5c:52:a3:4d:b1:3b:76:bb:f4:4d:ef:31:bd:1f:17:
         ef:dc:4c:ff:bc:41:9e:61:1e:4f:b0:47:2c:a4:32:ba:bc:7d:
         19:d5:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:13:41 2025 by rpki-client