Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa
File:                     058155a4-ef5d-3eb3-aa26-358a05abf901.roa (raw, json)
Hash identifier:          SaWGqbD+2N0SgFoGvo2bJ/Ah0dqQ1lqYSAnUZryMqnA=
Subject key identifier:   67:0A:CE:0A:3C:10:92:80:61:62:BC:3E:D9:E7:3E:8E:0B:BD:AD:38
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B715CA320315C9F1C89D5D8F0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     32636
IP address blocks:        2604:4000:7000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a3:20:31:5c:9f:1c:89:d5:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=8b9d4f60-b46b-494f-b00d-f70cef837d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:1a:32:f6:21:c5:ee:03:d3:ad:f2:c9:b0:
                    5b:50:74:20:39:f0:f1:50:59:8d:ea:80:a9:e9:6c:
                    0c:17:5d:c3:96:36:d6:06:60:b9:97:ed:4e:ff:f3:
                    8c:66:83:75:54:e9:7c:47:99:3b:05:0d:54:4c:ec:
                    e4:2c:0d:d1:25:c7:5e:fa:90:2f:cf:fb:b0:b2:da:
                    f8:32:d1:56:3d:3f:7a:ea:4e:ae:57:89:c8:7e:41:
                    e2:96:15:24:82:dc:52:7c:61:42:09:bf:08:33:68:
                    c1:c7:33:9b:85:e4:57:af:50:e8:46:c7:11:1e:6b:
                    28:d7:54:dc:82:2a:41:eb:a5:d5:ae:98:66:69:1e:
                    4f:94:22:ba:c4:cd:d6:eb:b0:8e:7b:02:b9:e8:34:
                    1a:ef:8b:26:a8:a9:9d:f6:75:26:41:7f:ab:6a:3b:
                    84:6e:77:f3:d3:e0:96:02:e7:23:c8:f8:26:6b:65:
                    b6:2d:7d:db:f7:67:eb:ee:30:d0:57:d9:54:0a:de:
                    8b:33:6f:79:7b:9f:47:42:bc:58:ba:98:df:e0:00:
                    cc:a6:d1:2b:e2:fb:b3:ca:ab:25:29:df:6f:74:63:
                    77:d7:a1:2c:3c:22:fd:05:7b:99:db:8f:56:93:5e:
                    7c:bb:b9:3c:d5:04:78:0c:e6:3f:d0:7e:2e:af:5b:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0A:CE:0A:3C:10:92:80:61:62:BC:3E:D9:E7:3E:8E:0B:BD:AD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:7000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:bd:c3:d4:1a:82:55:af:7e:9a:35:ac:f6:c7:e7:b2:b3:
         9c:cb:c6:2b:44:3d:da:51:de:80:1f:b6:3b:e9:d1:61:ee:4c:
         6b:70:7c:b5:60:3f:a8:94:6b:b2:f9:13:ec:d8:89:1d:be:48:
         46:b1:1b:44:21:e7:e7:e1:cf:ad:3b:77:0f:66:bb:db:af:70:
         11:7e:9d:f3:06:56:1a:81:0b:fc:58:ad:59:7e:61:9d:20:34:
         96:66:3c:ce:ab:01:6f:24:cc:69:4a:e7:83:63:64:6a:f4:c7:
         32:f3:cb:4a:a6:89:ba:cf:27:fc:5b:06:f0:c0:52:30:4b:14:
         7b:b8:9d:54:23:04:9c:3d:e0:0d:17:25:45:91:ed:fd:1c:a4:
         70:2e:da:2a:71:55:69:b7:e7:c8:6d:a8:7e:f8:a6:fa:82:f1:
         9a:f0:f5:21:62:d1:bf:44:d8:65:a3:3d:87:2b:f4:2e:03:0c:
         c4:30:17:94:41:2d:b8:e9:75:08:a8:a5:87:bc:fe:7c:fa:55:
         bd:96:0a:f8:d1:43:ab:77:de:b7:9f:05:0c:5d:b1:d4:07:cb:
         46:90:74:1f:14:28:80:c0:49:62:2d:89:c4:0c:e9:ad:82:59:
         89:53:06:71:7d:e3:cb:bd:c6:88:8c:10:3f:3d:dc:07:ce:c3:
         7d:6a:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:24 2025 by rpki-client